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Chapter 1 
In traduatlou 



i.-JSwS**-'^ 



'WM*& 



Gonmuter Hf iliaji hava tratitnmatty ten rinutetod on a atotfla, aiquamtlal 
wn If tha gi l m to to *molata4 oomtana a i«nbn of conaomamta 
which oaarato im rarallaL Om of tha yrtnary ouraaan of ahaulattam lamguafaa, 
auch o« OPSS amd 3famnrlft II [13], to to ardor tin ainulatJom of tha tvrati 
oeeurim* tat tho dtfftoaat comyoaaatf In ameh a way that tha ainolation will 
oorroctly nodal tha oaarattom of tha ayatan to b* ahmutetod. Am altoraatlv* 
affraaeh would ba to alaralato partial uilini am a matwark of eonputora, amch 
as a matwork of nferaproonaors [2,14,21] or tha Arpamat (16], whara aaeh 
pim ia mu would ahmulato tha oforatloma of omo noniiaiot of tha ayatan. Thla 
would allow tha a h a ulatta m to axptott tho ■idHlnlty amd c oawr o mcy of tha 
ayatmm to ha riMmlat a i amd tharrty itaitf aohlava a high toval of nodularity 
amd oomcurramcar. Tha ahmulattom of aaehat ooauaumtoattom architaetaxv mtaaii 
[6] aauua particularly amttol for thto waioaiih, ateoa thaw ayatowa ara hUhly 
imodular - tha rowyna«aU of tha ayatoa orwato lmdaaamdamtty amd eoau 
with aaOh othar omly hy awdtog ■inaji fwhata. Bamoa than ayatoau 



ataaulatad hy a ; i mil 1 1 ill nf nmnmn Tiim nniaaahia1i''1j "hunan 

Pmokui OonnuulamUon Arahitaoturo 

A aookat connwatiiattom a rc hi t a c tmr t aynm oamatett of a munhar of 
lmdasamdamt frocm a r nodutoa whtoh cmnumtnato hy nmdlmi aackata of 
lmfornattoa to oma 
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Tlit modules ta « packet 
communicate only l* • Uadtei 
the fern of 
to the module la 

nd iafifsf date, tut 



architecture system can 
All iwaiuaastianwa with a modal* is In 

•mi of the module, which can to fiven 



form. Thus, a 



ooati to Initialised with e 
tt on meet** iaf armatkm only la 
wtth oaly • limited number 
of other m od u les * asc* modal* iimlm aai mads oat packets through its 
Input aad output fast*. A aaHtaaiar input port to a matala eat receive pockets 
oaly from a parttcutar ootput port or soma mudam, or from a particular source 
outside tha 'sgutnsv lama mats of tha letter type am aallsd system lam* ports, 
gj,^ a^y gjp- pjp, om^ mamav fat' am saunas! seam* up sand .data- to the system. 
Similarly, from a aarttcalar output port of a module, packets can to saat oaly 
to • partjffuler input mat " of asms module or to a psrttettlar axtataal destination. 
Output form from which packets am mat to external dwttailoai ara callad 



to am tnyat mat of 



of the peaketa. 
Thus, a 



output ■port of 
attar tha values 
eMsrina of the pockets. 



oa men ss a 



The 



la a 
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antononumsly. Thars is no cantral control lm tha aystam, and any monitoring of 
tha aystam oparation most bt ptMira. That Is, only an external obsarvar ia 
allowed to monitor tha modalm or rnannata In the fyslam, and tha monitoring 

ia not vital to the system's correct operation. As a result of thia antoninUty, a 

, . k i •■*• *.--• ...» - , • ' 

of taw status of other .modajaf in tha systam. 



A packet coautasicatfem architactore systam is deatgaad ao no component 
of tha systam will as refeired to fulfill any tlBUan: constraints. Instead, tha 
systam mast ha dfcfUnafl to opatata correctly laaniftiw of tha daisy tinms or 
throoghptttt ef the nmdnle* and chsnnsla For exampla, one modal* cannot 
require another modem to have a minimum fasponw time, As a result, ssod u loa 
must u« asynchronous esmmunieattea protocols, ao that a module cannot send a 
data value to anothar module which lacks roffteiaat hvffar space. This 

however, mast b. 
modtftet for sad* data 
it ,1 Mi woslaad from a modvlt to whieh data has boon aant 



would' eonaltiufo a form of 



input iaforaatfcm. 



As a 



of this ttnw-lndapeadeht 



or any of its oompoamt* is a p ar fo rmano 
for correct oparation. ft ona modulo or 
alow down the entire systam, hat it will 



design, tha spaad of tha systam 
and not a necessary reeuirement 
to particularly slow, it might 
cans* any malfunrttoma 



Examples of packat cflmamatcsttan aiehitactara systmas lncUtda tha data 
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consistently haovily loads* and hanca form bottlanacks la tha system. A 
bottiaaack can ba aliaUaated by laasstgatet tto modulo or choanal to operate 
faster or by splftttlai on* modal* late stvoral awdntej. Bacanss tha ajrstem is 
daslauad to ba spot* tejapeadaat, tha spatd of ana modal* oaa to> varlad 
without aaaatac aulfuacttoas. 



Oaa fnrthcr result of this modularity of dastia r-te that thasa sjrsteais can 
ba provad corract ainch mora assUy than othar computer system*. To prow tha 
corractaass of a packat conmuateattoa architecture ij ■!■«. oaa eaa specify tha 
required properties af aach module, prove that aash modulo satisfies thasa 
properties, and than prova that tha system will opaiaw correctly if all m odnlas 
satisfy their reoulrsmsat*. la othar words, ths oorreeja*** of tha system can ba 
provad BMidnlarly. General methods of previa! tha corrastaass of packat 
coauanmleatioa architecture systems ara currently bated tavastigatafl by Ellis 
[10], 

■xsuuplos of Paaket Ceauauaieation Ardbltootvra Modnloa 

Three baste atedoje type* functtoaal u p mute i s, switches, end arbiters 
illustrate soma of, the operations which eaa ba performe d by packat 
communication architecture .modnlas. £zanvks of thair oparatloa ara shown in 
Flfure 1.1. hi tha dtejrams the lines represent tha chanaals connected to tha 
input and output parte of ih» nwdutes, and the dote on thasa Unas 
data, paidcate beta* transmitted ovw the 



A functlonsl operator compute* several functions (oaa for aach output port) 
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With Input packets m argruMiiU. It can fire ai soon as one. packet la received 
at each Input port, omening that it cbeotbs these input packets, computet the 
output Values, and sends one output pocket from eeeh output port For 
example, the DIVIBE module of figure l.te confutes two fun ct i onal the 
Quotient and the HBJrtadn of the Input Values. 



A switch module p r ovid e * a meant of routing data to different modules in 
the system It can fire as soon « a packet is received on its input port. In 
firing, it ehtorbs the input pocket and thee sands en identical output pocket 
from one of several output ports, depending on the packers value. In the 
example of Figure 1.1b, the output pert selected amends on whether the packet 
value is positive, aero, or negative. 



As a final example, the arbiter module serves to merge together the 
of output pocket* from aetefel modules. It cea flie as soon es a packet 
is re ceived on either input part. la firing, it sneerb* e packet from one of the 
input ports and sends an identical packet from its output port If packets ere 
received at two input ports simulteneously, the module will first fire, absorb 
one of these pockets, end send it out By the rules of operation, eny pocket 
which is not absorbed wiH remain at the input port Hence, the module will 
fire e second time, absorb the reaudalng packet ond send this one out 



Other pocket oomatenits tton " ar chlie c tu ie modules can have behaviors 
which depend on other fectors, such at pest activities of fee module, the arrival 
times of the input pockets, end stochastic preossses within the module. The 



. tt- 



«CfB 






for a 
of 



tat 



•-.*-*->X •:■:}% 




mm 



«f m 



aot oaly to flad aa 



tea t» Um blgfe to««l of 

te 



tte 



of 



- 13 - 

particular aystaau nni to as vary difficult. On* caasot daply count tha 
aojaaar of l attm c U o a cyctai ratatrai for a partftealar pntfrsm with a particular 
■at of laput lata. Whtla tha aadulas fatoract with aach othar la a vary 
limited and wall-dsfiasd war from a fnactJoaaJlty vtowpoiBt, tha parformaaca 
of a nodal* earn haaa vary MMk tfftcts aa tlM parformaaca of tha ovsrall 
system, for aaampia, tniiaartf tha throaahput af oaa update 



modula to aaeama a bottlaaack la tha system. Thus, a "modular" 



approach to parformaaca aaa^patt will aot work, fuxthartoora, tha system 
rtarlfaar ..waste to kaow aMra thaa Ja#t tha avaratr or worst can aarformaac* 
of sama system. . " Bs waate to fcaow'tha datafisi i ttr fu r maac a miarajwainto for 
it of tha system. Th» aaaiaat Of datell 
by a matasairtltal aasljlli a 



Aa aoearata stamlatioa of a igrtam would aroaMa tha daajrad 



to far a particalar art of lapat data, White it atiaht ha hard to 



judajs tha ganaral psrforamaos of a system teaad oa ataaulatloas for a raw aata 
of lapat data, this aparoaah aaaas to prosids a fmt daal mara iaformattoa thaa 



To avoid ooafojaoa aatwaaa tha system to aa simulated aad tha system 
tha lattar will as arts* tha tlawlsttea system. : a^ai ttowQ tha ■aetaal" 



system mijht la fast oaly astst aa psaar, tills arsmp ttha a ra saa aahl a way to 

«i ,v. $ ■ A -*fe. S *S? ,%-. j ^vr 'v*/. .■-:v>-.-j*5. .;r *■- &y *,-■■.■■■.<■ ,. .:;«,3? ■ 



dlsttaiateh tha two. Purfharmora, tha modates aad raaaaals of tha actual 
wHI aa eallad tha aetaal awdalas aad 
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computer would simulate the scttvttiw of every module and ovary 
communication channel im the system. White thte approach would be rather 
■low, It te not diffteult to lmpte— mt for every packet om an Input port of 
some module in the system, the simulation keeps a packet descriptor of the 
form (tf,*,*vf>, 



M » the moduls somber 

* ■ the input port number '-_. 

■ ■ Hw lijtaa iimuiinl In tin partit 

t ■ the time at which the .Packet arrived at the Input port. 

packet domiiptoii ara stored at a •ofuaattal. list caUad a time i(w. in 

which tha d e s cttete a a ara ordered by their time vaJees^ Tha itwnlatkw looks at 

tha tima line amd decides which moduli la tha system would fire tha soonest. 

It than simulates tha firing of this modute hf removte^the absorbed input 

pachats from the ttma Una, computing tha output wduas and daisy tima for tha 

. module, and than -iPVfa* ' a * w ' ^fa* '& V!$$*fy . for sack. : ^|J1P* #•#*** *»*» 
tha tima Una. Each now packet de s cripto r conteteajha, modnte and input port 
number of tha input port which receives ^ naskevjkejmjjmi of this packet, 
and tha tima at which tha input port would receive fee packat. This process is 
rapaated for tha new time line, and so on, until no module in the system is 
able to fire. As loaf as the simulation always simulates tha earliest firing in 
the system for • given state of the time line, it osn be certsln thai all input 
pachats which would have bom received by this module at firing time ara 
present on tha time Una. Since ■ modute cannot bs affected by new input 
packets arriving white it is firing, the entire firing of the modula can be 
simulated without taking at other modules in the system. Simulat i on 



A^M^Maaj^a^Pi "Jpm^lP* 4aw WWff** '•apF* ;ipasaaaaP#a'flJ7» ^ i *^^»> ■ ■''W*'™ t^aa^pmap** *** %a»mm ""^^ •»*■> 

rtmwlatlag Jha aottetttef *af « aamter * mmmxm* na a mn . am a single 



A lata* fraction of tha sftmalstion flaw will b« *p«at lootta* at ths tin* 
Una to tfacito wait* modul* would f in tarUsft What*** It is not difficult to 

tnwvpjakaMAanPar ppappMflm^m sms^myap? ; .pwaflfjjwpaj^jp - ja^pmmm, ^^^*- .v^^"^PII^ fy^^r^^*^^^ ^■•■^^a 

WIVMNV ^BJBVW V^^apjns/ ^F W(i^ pnBPm> ^W 'Pn'#n^pm' ^m^smVP# v^ppawaanv •^pm^pJB^Pnpranpaw#as*v «vvp*m«ms> ^^ap^n* 

apjppa^pfam -41W .apapPWflJ^BpP -^PapJp* aphpmjpj npJa^BjpT^ws* ^^•'•** aPap*»^m#Ww* # saw *naw apaaw 

system iaanaaai, thara wUl t» mora motnlai to eta**, aid mora descriptor* on 

•••^ •■ai^^W MA^^aP* c^NHPpPaPPS P^S^P <paaaMaW tOW^P^^P* '5SPB> W.WWmt^^PaPnB> Ppn p^p^p ^^pS^»^OS^W^^^^^» ^^^^b»^ 

worst cast, ternara ,£' tha ap V »• JPPJ» 4pW" *•«• will ha a Unaar 

•apsjpaTP^papp' «ta» pJmpI -^ppapjp* ppaajppwmpm *pa Aawpp^pp) -p*J *^P* anp^p*apjp^ppmWa •*■•» avipa. pjpmaa* • •a«*o*^ 

11— r lacra— i la liW^lma I to doella which modvla would fin sarliast. 

A IW mAawSW as^PAPA* .pW vW¥*IIHHv wpapAVaipraPpT -^awW pp»aAwaj,«apnp) ^sm Mpm apwaananjaipnpo wan aaww* *•■«• 

hand, wtn twwm» •»! br m* Ipj'.ayjtem lapn. As tha alas of tha 



system is laertaaid. tha f too wtto o of glmttlatkm tlma spaat on ovarhaad will 



An alternativa to «tmnlstl«i on a aasjpagal computer is to simulate tha 
systam on, < oqaytttar syslap j^ilitta^ of a awiitwr of iatarcowweted 
simulation prorassfir^ qmh at j^ J»ai^ Aichite^strf StanOatioo TacUity of 
LaunA. «< al j[14X show* ia figura %&, la thia facility m taopr o caw ors sarva 
as simulation grncaianrt. Each ahaulattom sracamot atmulates ana or, for a Ur*s 
system, aavatal of tha modalsf ia tha system. Tha ga o om a aw aaad aaekata to 
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another, just 
Mtoiwri 
of alninlatlon 



to 

packata to a 
i» 

a 



tha ajcdulaf la tha actual ayatam would- Tha packata an 
network, which povftdac connection* antona all pair* 
During, a atauUatton, however, a pioo a aaor would aaad 
only if the ftnt If riatalattaj a uwdula which can 
uionula aatng atnralatea hjr tha aaeand. Tha onaMawnlflatlon 
to allow the rianUtUw of any ayetaat coafldorattan. In 
iced pnajraau two the atoduMe, laltiate tha 
tta 
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Figaro 1.* - Structure of ataralatiaa fadlitr 
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pgocaaaori should act anteaomoasly, with bo oaatral control. This will simplify 
th« computer systam raoutrad to perform tha stamtetina by removing the BMd 
for a highly specialised, high speed central controller. Of oouraa, paesive 
monitoring might be allowot to obasrve the rimolation activities. Second,, all 
communication between almulatton piociawri should bo ia tho form of packets. 
Aa a result, tha procmaiofi will have a uniform form of input-output. Perhaps 
moat Importantly, tha simulation will ba tima Indepondeiit. That ia, tha 
a cc u r a c y aa* louoclaaai of the slmulatiou will hot depend on tho speed of tha 
elmulation ptcceseori or tha communicattoa network. Thia will eliminate any 
real time ooastraiats oa tha rimolatton haatwara and software, which will 
greatly simplify tha design. This will also enable tha stmulatkm to ba 
performed oa say oompatar systam which supports coauaualcetiBg. processes. 
Tho simulation of aach compoaaat of a systam could ba haadlad by a difforoat 
Several of than ptocwaM could ba asMgaad to oaa procaaaor, which 
on o cu te them without any time 



White tha stmulatton might ba fastar oa a highly iparlslliad simulation 
facility eenlpped with a high spaad coatroUar or pw c a am w designed for raal 
tima applications, tha amoaat of tima sad moaay reeuired to construct such a 
facility would ba justified only if s vary terga number of simulations wora to 
bo performed. 



Tho problem thaa baotmes enveloping 
OBmwmamattoa architecture priaetptes, whtah wffll settafy the other three goals* 
generality, atmpUclty of software, and raasaaabla efficiency. Om mm of 



Umplifyta* the task of software dodga Is to take a modular approach to the 
design of iftmnf itm ' jn r gn sii H» ■jp-f*'— prsgssm far a module must not 
only simulate the estrvtoef or fee medals. It mast Oho n onian i n Jfato with other 
module program! to keep the stmalattoB aetl-vltlw os oi d t nat s d Thus, tho 
specifications for each riatiHtca program will include not only specifications of 
the module to to stlsanatod, but alas spseJ&ostieas of the ooordtnottoo activities. 
To keep tho rtsilgs mnrtnlsr. tho cooidtnottoa ecttvitiei most be simple and 
uniform enough to bs easily and accurately sp o cifi sd. Moreover, thoso 
coordination acttolMot most as both gsaaral and r sss oasbly efficient. Tho major 
task of this thesis is to develop csoidtnattoa motkods which fulfill tho 
requirements of simpttcitjr, pawiHty, and efficiency for a simulation which is 
ltsolf a paekot 



La. tho mednlas and 
channels, wfil be Mi nam I. first, miss of cp a rattoa for paekot communication 
architecture modules will be presented Then, methods of simulating both the* 
functional and ttmfeg aspects of the module will be enveloped. The emphasis 
will be on spectfytng what a correct atmulstfani of a module would do, rather 

cngssms whtok sent esuarslsly atmulate a 
•of Urn sii<i1 i, m loft as an area for further 
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In Chapter 3 the Idem daveiopad in Chapter 2 will ba extended to allow 
th« •laudation off eatire systems. As will ba aaan, If tha almulatlea procaaaora 
are simply loaded with program* which Haralata tha activitiaa of tha ayatam 
compouente, tha almuletiea might mot eocurately nodal tha ayatam but instead 
reach a deadlocked aUta. BaaMas almutott*! the actttttfta* of tha mcdulea, the 
•taralatton prqeamora must raaiainntaata with each other to heap thair effort* 
coordinated, tha mala pnrpasa of thia chapter » to develop mathoda of 
Iraterporatiag tha coordination aetivittos late tha aimnlatieo processor program*. 
la thla chapter a proof win ba aaaotftafl watch ahowt that tha a tm u tat tea wlU 
accurately model tha actual ayatem. Tha fill proof fa cwrteinad la Appendix 1. 
Thla proof aaaauajllilai iha baaaftta of tha modular approach to fee deaigh of 
tha simulatta*. fttat, fee lattoiiaat i^aiJ^iaanti fw tha taodmlai ta tha ayatam 
and for fee simalatloe erogrsau of thaaa modulaa wm te ap a cfftof . second. It 
will ba proved that tha etmabrtton and eearttnasbnY awiUodi of Chapter* a ond 
3 aatlafy thaaa raifalraawati, * Hualli^«*x*^ 
which aattaftea tha reaalt aamati will aceniettiy model tha actual 



In Chapter 4 raatheda of terminating tha coo r dl aat loa ectivitiea, once tha 
modulaa la tha ayatem haa* oaamt aottalty^^pm pra aa at a fl. Without thla 
teruUnafem, fea aiawaattoa might rua ladefflnitaiy, avaa though no modulo 
*ctt?ttiaa are bateg aUautetaA. ThetesfrfWftaf fee ifnmtw daacrlba* a- 'proof of 
the corrortaam off fea tanamattea uiiiMtteai, Tha fall proof la cantatnad la 
Appendix 2. First, it la proved that thaaa oparatSoaa wlU aot terminate the 
simulation too aoon or la amy othar way iatarfara with tha al m u l at i oa 
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simplicity of hardware generality, simplicity of software, and reasonable 
efficiency. Moreover, those technleucs ajca provahly correct. Tlila la 
particularly comforting considering the subtle nature of parallel, asynchronous 
computations, which cm often have unexpected aa o dlocks , races, noutermiiiation 
problems, or other malfunctions. 

For any amputation which Is designed to ha executed by a parallel, 
esynchronous system such as a packet communication architecture system, a 
proof of correctness Is essential. Tha traditional approach of implementing an 
Initial version of a systam and than debugging It wlU not work for 
computations which must to tima-lndapandaat. Evan If tha computation is 
taatad on a large numter of tast cases, ona cannot to certain that It will to 
correct for all cases. A slight change in the timing of one part of the 
computation might torn to a deadlock, critical race, or other malfun ct ion, Even 
in trying to prove the correctness, one can aeslly overlook some of the 
aubttettes of the computation. However, by carefully dev e l op in g a formal 
deseripttoa of the computation and then proving that a 
which fulfills this dasBrlption will 
to 
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moda. White ia th* w«H and*, th* attdute cannot produce say output packets, 
Oace tin aacsswy coadlttoa* for flriaf srs bm*, th* awdate flras, moanin g that 
it absorbs sop* of tit* iaput psckats fro* its iaput porta, parfonas 
computations, aad nm tha* teftw ssadi ssahsli frete its eutput ports. Than it 
changos its intanul state tad rssaters tha waH Beat. la gsaaral, an input port 
caa bs a buffar which oaa h*ht a awabar of packs* *Ua *i t ana omlr. A packst 
rasMias at aa input part until It to rt s otted by th* aMdwte . Aa output port, oa 
th* othar hand. Is nun* libs a dear through whteh output packats pan. 



Tba aodals most auk* tb* following daetsteasi whaa to fira, which Input 
packats to absorb, what oosjputstioas to patfbna, th* valuta of th* output 
packets aad th* tissas at which thajr ara ssat, aad th* asw state of th* asodute. 
dacisloBs oaa dapaad oa th* followiag factorst 



1.) Th* uaiuas af all psekats at th* input port*. 

2.) Th* ttte* at which sash of th* input pachuts arrived. 

3.) Th* OUlttt UBM. 

4J Th* currant stats ef th* 
6\) itUrbartlr ptcuMi si wit 
, white a aviate ii to th* firing awaa, it nsaanf m attested by iaput 

a»dute aatsssd th* fWaa 



These rulsa of operation sflow for modules whose behavior depends heavily 
oa tiBMt th* currant Una of ths audute, aad tba time at which each input 
packst arrives, white this doss aot fit ia wdl with th* philosophy of 
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Modal* History 

The input and output information motived and sent by a module while It 
is operatina: on bt formally deseribea la tow of histories. The history of a 
statfo »ort is « o^pMoot of ortmd vtfm 

whom *, Is the (|ata value ooatataad in the Jth data /packet arriving «t or being 
•nt from tha pert, and tj is the time at which tt la loceUsd or scat. Since 
packets ara amt or recsivel one st a ttms, ws have tj>t M , for aU J * 1. 
We also require ,lj > «♦!**■ i»»Has that ao output port can produce a packat 
at time 0, this rastHctlom fa part of the Bona daisy rsstatetioa which will ba 
dlscoasad la Chaptar 8. Furthermore, bo input port earn receive a psckat-ut Urns 
e. Any packats praam* at aa input port laittaBjr ara ooasldarad part of tha 
module's Initial stats, aad not part of tha input port's history. 

White similar In idea, this dsfteitkn of history differs from the 
definition* used by PetU [1«] and Kaha [11) m thetr work with determinate 
systems. Their histories am sstnenoat of data vatass only and contain no time 
values. Histories without time values wem useful for them, sinoe determinate 
systems have tlaw^ndaaendant beholder* fee sliaunnon purposan however, the 
simulation of the timing is as ia^ortaat « the atmutetbrn of tin data 
operations. Moreover, the time vatnss are part of the input and output 
Information of the module. Banes, ths time vataw ere an important part of the 
history. 

Sinoe en infiaita number of data pnakats could eventually pass through a 
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danotad h| c hj. If 

h| - (x J ,f i ),(x 2 ,r 2 ),...,(xyry), 
and «tt]wr 

hg - tej»f |l , (xjtfj) (*jtf j) . (f ^|t r^jl » . . . ♦ <**. <«> * 

or 

hjj ■ tef » f j) « («2« f j) ? • • • » 1* j« ' jJ • toj+i* '/*|^ • • • • • 
Tha* h| It as initial wgiaant of hj, daaolaa hj C fej, If hj c h 2 or hj - hj. 



TImm relations en at aztoaoad to aoinla input «■* aodola output 

If 

HI - <hi i ,hi 2 ,...,hi t > 

HI' - <lili,hij,...,lli t > 
than HI C HI' if and only if i 

■<■. •§! sfi Wy^ior^att-/-J^Btii:- ; ; 
Tha d sfla l tt on i for avonls antpat, ijHam lapul, am 
similar, gfdlailf , «•> on daflaa tha calatton c 



A fiaal aotattoa i» to daflaa tha history ap to soma Mmm t. For a alalia 
port, bit) la a history, h\ whara h* contains aU alssjants 1b. h with tinaa 
valuas s t. Haaca htt) C h. This laaa earn aa ■atoaaai to nurtvls hlstortos , as 
walli ' ■ ' 

HKr) - <hi f (r), hi 2 (f) M a ttl> . 

ThusHKf) CHI - HKco). 



Bfttftg tfc* 



flw 



/oactlojw of 



IB 



0O4 »# ON 



of o pocket coouonaJcotloa 
IT Qm ooMfeolo COOtOlBS so 

00* too tHul ototo Sj 
i Sf. for 
of HI* m^, ood 



Nolo thot o 



[18] 0O4 Wit cm 



•jr PotU 



'.;ViS,r;f ?,'3 '■" 




ortortm of 






toyot port la 



lo whlck 



lO tOMU ol 

ii -v i 

tmt i r of 



'■oil* A 
If ooflpot fort oj of 



Mj la 






l r wffl 



Do* to tlM 



m r « (xj.f'j) f Ixptjp . . . . » iMj,fj) 



t • • • • 



f / > «7-|. 



- 31 - 



received "before" they are suit, fj 4 tj. 



Willi* a commnnicatiaa channel cannot change the values of data packets 
or their ordering. It cm introduce * delay between the tin* «t which they are 
•wit and tha time at which they are received. This delay must ha simulated, 
since it will affect tha Input history of tha modem to which It la connected. 
Tha communication channel caa be simulated hjr one of several means. First, 
wa caa simply ignore the dalay aad coaaldar hi r - ho r Thla would ha 
appropriate la eaaai whora tha dalay Una of tha channel la much amallar than 
tha dalay time of the modules. For example, if the modulei are close together 
end directly wired to erne another, the chaaaal delay time will ha /vary email. 
Second, we caa almulata a moduli aad" the channels connected to its output 
ports as e Sinai* unit Coaotptually w* caa view this at extending the 
boundaries of a modal* N to Include its output rbsnaoU, as shown la Figure 
2.1. The output perm of this enttaded mwiwhi W are wired directly to the 
input ports of other modules. This solution Is appropriate if th* channels 
connected to a module operate Independently of other nhaanali in the system, 
such as channels which are Implaejaated as FHO huffor units. Finally, the 
most general approach would be to simulate the Channels as if they were packet 
ronnn un t c atlon architecture modules. This approach would ha required if the 
c h ann e l s do not operate independently of one another. For example, if packets 
are sent from one module to another over • network, such as the ABPA 
network [15], the delay ttnw could depend on the total number of packets being 
sent over the network. In this cam we would almulata the ABPA network as a 
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simulati on pro cess or can simulate the operation of a module without any 
real-time constraints. 



For example, suppose we wldt to simulate a DIVIDE module at shewn in 
Figure 2.2. If the simulation procwwi receives the pockets, (x,18) and (j,28), 
on it* Input porta, thorn It will simulate tha firing of the module at time 28, 
and, since the delay time of the module Is 5, produce output packets 
( *feod p)* 25 ' ■** <«/j»25). The simulation Is not required to operate at a 
particular speed, alnce the actual time at which the output packets ere sent 
during the simulation is not Important 



(X.10) 
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! of fltmuletiou Module Opmsllou. 

With this umans of simulating the timing, the output of the simulation of 
a module Is the entire output hiMtory of the ectual module, this can he 
deserlhed formally by defining simuletlon himwUm. For any port In the 
simulation, the simulation history Is the sequence of packets passing through 
the port* 

ItS a (*J,fj), (*£, f^t •••* to/ •'*)•••• » 



wfcafa « fj * % * ... « ty < ... . V ■#• ■*■«•■*» aawaetljr atnnlataa a 
tfcta in • fa. ajtwaa fata** Matey *f tt» um iiiaiii lUl port 1* th« 
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iaput ports of the modules la the slmulatloa, there is no guaranty that the 
relative ordering* of packets on different iaput port. wUl hs preserved. This 
can teat, to a proefem of proaatara firing, la which the Aria* of a module at 
some thmo 0hv it stmvJetad baton m input packat* with tlma i (pr« hava 
arrived, lor asnssnle, If an srblWr la tha gtanlattoa racrtvai a packet (x.18) 
oa oaa iaput port, it might stmolete the firing at time #lr* - 10, and (ecramiag 
It hat a delay time of 2) and tha packet (».12> from Its output port. Suppose 
aow, though, that a packet (*,S) is received oa its other input port. The 
arhltar has fired premsiarely sad the simulation cannot proceed properly. 



To prevent this scottem of p PMHtai s teiag. the firing of a module at 
time |*j» must not he shmsjated until ths settee input simulation history 
HSIitJh*) has seen received. The only wey Qw stmultttoa can know it has 
reserved fcsl A (fpw) on input port % is » tt recetvw * packet with time value t 
s/fev on that input part. Thus tf Um stsNlattaa stem fta tfeM vatae oT the 
rsearaat peehet oa each iaput port t|, ahhoted Hut g then the 

lacai 



firing of a modal* at ttaw $fhv osa be etaoleted it tfin i •'" 



The simulation of a module procasds es follow* 



1.) Dstsratiae Whether th« ttwdoi* «aa fUe at aorne tint* f/!r« s 
aSSto ««srt ft ) bawd oa the data and time values of those packets at 
the input parts with «m#* rant state oTthe 

modal* S r and ths outcoma of shautsHoas of 



ft.) If the module can fire, then simulate the firing of the module 
at follow* 

«). Bemove the proper iaput pockets from each iaput port. 



Ohly iualttjtj wtth tUMinbu s tfir< can ha ramovad 



a). Catalan ■ tha output >- im mmm and tha output ttmaa. 
Tim aafeulatiaaa aa* 4«oa* m^^mk^mtmt^ g aa h i ai with 
timmlMii ijftra. FurttMraux*, all output ttauM aunt ba 

*U^. ^ fl«v^5 ?^*?«od' ■ ■■J' -^ .•.'■■ '-.v^ 



cfc 




Asnimiag tha almulatton will piaduca tha piop at output nctett each Hum 
tt ataralataa tha ftHftf of a modulo, tha o«tfat of tha liinulatton will always ba 
am Initial . iaaiaMt of ito awa^ Mrtiay tf tha^aataat o w an la , that la HSO c HO. 
Bowavo^ doa to tha futuftiainaut 1^4fa*;jfeW*fr.te*-mmai$*a& thd 
riainl atl on ; .of a oi a dula to <fta*j op %r wattiM i* farOaOi which WW new 
aiilao . nonouBL ..fiBr assault. Jhat at artuia* to -tha gjwn maiiiM* *ouUuaa.' ; n'-nochot 
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C*,10f an input #ort 1 tm^^ iaa a iiaa> aa) jamu mtth tuua gn aw r *hau 5 om 
input port ^~4jhp]L <**% • u^ffo*** to, <|ooaa 1tW;'tlrtBft «tf 4lw aaolul* 
cannot ba ataiulatad, tt ao nana paiiUi aaa tauj iiaajtaad an tapiit port ay tha 
firing of fh« nwdula at ttiaa tt wifl lovat ba aobMatad, avaa though tha 
aaodula t» aoabnwV Tha ituralatftoo must hi notlflad laajthow. whan tha laat 



pachat haa aaao pom ta aaah taout aort» -aa that any ^ ■ twiag input paehota 
.earn aa otBdiMpi iwaamiji With thi» aa<>f|aa|teai tha output of tha abnulntlon 



will to tha output hftwjr of tha actual Muaali, to athar waaia HSO -' HO. 
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Conclusion 

By including Xh» simulation time la Mch data yacfcot, tha operation of a 
modula can bt properly simulated without any laal-uaa constraint*. Although 
this rofulros sash ttmulatioa proc a — or to asaputa usm valuas as wall as data 
valuas, it aaablst us to ataulata a wide variety of packet comwnntrottoa 
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pravaat tha rinro Ut i on from haagla*: up. 



»»»»»»»»»»»« 




' 1. ' .»( " >■'■•)( 1 * 1" 



la tbia chapter, a want of provttlBg thta coordination will ba pranantad 
which 



the nrtactaiaf of packat coauaaaJcatiaa atehitactaxa. «»*»im*<**« 
autonomy of nMAnlat, conuannioatiou by paakat* an4 flam InatpanHanrn Ona 
further feature nf thta nnrmUnaHna mathrtl la that all aooaftiaatiflav information 
i» "»t aloac the a»M path* « the date packet* are. Than la no aeed for 
additional 



For each modul* to ba simulated, a atmwlattoa fincawor mutt parfdna two 
typee of operatioati module activity ajmutottoa, aad coordination Thaaa 
operation* together comprJet tha tctivitteg of a proottt called the simulation 
module. If tha ttmulattoa la lttetf to be e packet oommualcation architecture 
system, aach simulation apodule mutt be a paehat ronmumtrrtlon architactora 
m o d ulo , Thta meena that tha simulation modules cm ba viewed at autonomous 
if several of than hoc—sum are executed by one stmt 



-40- 



f «U to 



to 



to 



tlM 

Of CUM 



■■ii >'" 



t<>. 



is o ttow 



whom a 



U) 



to f wfll W not tmm 



ooit lo too fntow. 



■\sW?^. 



At 



IS OD 



flo* t OJoMr* fit too *oH noo*. Ji* loon 
9N< Don *r ? « Muf^MHom OO^OOJIWI c*T rt», fh« 
fuo Iota* or « ««» »*r. tt <»»»**«)• h*. o 

**p 'iMwoai fWof OM '-o*JHfctii~ ftj|P*fjow* v -owii«t 



Not - OUR ♦ 4Mn 



lOOJf*l ♦ WOjft 






ooskoto With UOM 



»j«t *■■■;*# 



?<?«.■ 



tot oo oat* 






feoff) eom ob toot from «U 
i with thoo 

"-•„*"■• f' r% v ...5' *•' • a ■ ' 
IT too ftotof of • aoiol* at « 

«• not flOOB am ootoot port • « 

«,, tfostaoj 



tfltt 



ttam fhla 



■ 4 ■■■■. . • ' -- ' - . t- .~*:- ., -. X..J*, ■ 



- 41 - 



output port will hava tina valuaf traatar thau 0lw 4 4*tet. 



Aa loo* ai all ttatt aoa aata fa^Mti acv aist fnaT «Kh output port of « 
aimulatloa JBOdula with «trlctly lunraMlid ttea valaat, aad tha ooauuuaicatloa 
lihka Utwu a a tha iMkNnniBiM *awr»a r tha- atuolFalr of tha packet*, tha 
valua of Umst k for a* tapnt part If «ttU tha last thua vaftaa raeahrad oa that 
port* aMbar at pvt of • ««t» pwdDit or w « tlaM paokM. No aaw packota 



bo rooataaaVat aa lapat port with tUM aatoar laat thaa or aaual to tfa*f A . 

If tin aaiuaaaf data* aaatfiaatar tkaa swo far *n clicatottoa aoftvJaa, than aa a 

. .-,' • .■■■■■• , . -- * ' ., , \ "■■ ,^j*r, 

». ■=!■■..-■>• ■•--V- .•••''••'.'S-? , ,fe' ■■ ~:~V-: {.y&Wfe 
larraartnaljr larger thua winei to oaa aaothar, uuta oaa of tha ahnu lat toa 



andoJae la abla to shualato tha firta* of it* awdoJa, ylfcarjrty aaoaliag dea dl ock * 



hi tha eaajapje cbewa U FJ*ur* 3,1, Tbe **«*■!•»■ ■©tola for tha arbiter 
turn received • date packet with tia* *ataa 3 oa la*** gort 8 aad haa received 
aothia* oa iaput part 1. Tha arbiter oaaaot pwajaljB jjlra before ttaw tmtn - 



alnUfetfj.ffajfj) - aln(t,3) • i. Haaca it maaaot umi j o p ojkj output paehota 
with ttaee valua laaj thaa or erual to fate ♦ 4dq • S+2 • 2. Tharafora it 



a ttaoe packet (2) to iaput pert 1 of tha eater* etoaulatioa aodule which 
la tun would opiate fiisfj to 2. The aider eeeaet poeably fire before time 
faifa - Bin (2, la) aad tharafora eaaaot produoe aay output data paehota with 
titoa valuM laa tham or aaual to tmtn ♦ <Mo) . 2+2 • *. Tharafora a ttaia 
packot (4) cam aa aaat back, to tha arbiter* rhautettoa ajadula whteh would 



thoa aa| tUtt t .... .4. aad, ftaet 0r« . 3 1 a ^il te if j,^^ - olo^S), tha firiug 
of tha arbiter aaadnla oraoid aa 
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11m operation of « simulation module en be stated at followsi 

1.1 Each tin* • time or data packet te received on Input port (^ 
update flstf^. 

2.) Determine whether the module can be safety fired. That la, 
whether the opadiltene are sufficient for the module to fire at 
some time 0lr«, where 

a.) If the module can he safely fired, then simulate the 
operation of the module on those input packets with time 
values s tfitr* and produce the output data packets. For each 
output pert 9 1 from which date packets are sent, update the 
value of tkutoutp which is the time value of the most 
recently sent output packet from Oj. for each output port Oj 
for which tiast-wtj < tftrt + Iris?, send a time packet Uflu ♦ 
ddej) from oj and update tlast-outj. 

b.) If the module cannot be safely fired then compute tout. 



tout • ttntn + dttay, 
and send a time packet [tout) from each output port oj for 
which tout > tttutoutj. Then update the value of thst-outj for 
each of these output ports. The value of ddaj must be 
greater than aero but cannot be greater than the minimum 
time required for the module to produce an output packet 
after firing. 

3.) Beturn to step 1. 



These coordination operations are quite simple, especially since time packet* 
are produced primarily when the simulation module is otherwise inactive.- The 
simulation module must store the value of ttast^ tot each input port, and 
tlast-out^ for each output port. However, no storage for time packets la required, 
since they are not needed once the values of tUut^ have been updated. 



Furthermore, the simulation requires some means of determining when the 
system input ports have received their final data packets. For instance, in the 



v *te*\% ^ / « *"** * *\ /^Na^^v 
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•xampla shown la Fffara 34, tte firtaf of tha arbiter jt thaa ..3 would to 
aUaalatad aad tha paste* (»,S) would to ssat to tha addor*s simulation mbdula, 

:.;• ;.. .:,..-. -*.«-;, a.. v .:. -,^, - •■ i.j/ 3 *:■," :.-. ,y; ■ 'J ■' .^.'i-,'-7''. ^'-, t** *";■.■ "Av '''■'■'■'- : - r !--'F - '*.' A?" 

, ■'..■ £T ■■..:■■.-■. :.'.■>-',■ ...■ *■■-.■■' ,. ■■.:■ .. -,■;*?*• '* :**■■>':.-■ > ■ r! ,, .vi' '?.- % ■*..■'- ■-- - - <•■* 

la FJgura 3.2. 



» ^ »»»»»»»»» » » » ii M »< « >»i 1 iii» » » » » >«»«»» » »» » * » ftHM M Hp l HM |i |f > < i i i r »» . n» » > » «i w» »»»»»» 




Tha 



of ftstf for tha 



»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» »» »»»»»»»»»« 



that mo aura paehats ara raoshrsd at lapat fort 2 of tha arbfttor (thla Is 

^•^ *"• *•' *"• W*» •■•*■. Ww^W»*to^^»> •■p^ft^PP* w^^P^P* PJp^^^pp^^ ppppPi *>«0>PPhJp> P^aoa^oj 

««rj »■ 5 < $n m 1*. lastaai, a ttstt im^ with va*s aln(S.i») ♦ 2 will ba 
ssat .to tho srWitar*! jlMilaltoi prfttult-.. TMi ftPalatlto affldito fttaaiittti 
tout - oin{7,3} ♦ 2 • S, haaes.ao ttaw psqhat will to ssat. «aoa agate, tha 
stwolattoa has huaav op. Tha daralattoa awduto for tha arUtar is still 
•xpactia* data paehats on lapat port 2, tot aoaa will ovsr arrtva. In orda* for 
a ataaalatloa to ooHplata all ofaratteaf ap to sojaa ttaa tflml tima pafthats with 
valua *, fpaal mm to ant to aU cjrstoa lapat potto after tha last data paehats 
havs ton ant If wa waat to staaalate tha nfto* opsjstfea of tho ajsteto. 



-4*- 



tin* 



to aU 



#w vli rtf ni" to oriHlSfc fear- < 



input parte, wh«w oo if 
to. o m iMi 4 w j **f m ^^ i> j 
ttnw porkatt to 



wfll n» 



In en* iTipli, w wont to oaspiot* all 
pocks* (It) It snot to tko atokar** 

ft* - «in(7.1i) ♦ 2 • S an* aooi tote otto* to 



IKCnnptar 4. 

Wtth ttOM ill. If # 

it would compute 

still 



cannot ba fbom aafslp> to&oittao packet vtt'ioo *ln«,l&> +2-11 woold 
bo sent bock to too art**** itni nlttlon ■einla wntek to tax* would sand book 
a ttoan pockot w«ts* wan* »M»Oiail » 2 * >2> Iloally, 9»« « 18 s 
elRUtastj.ttettj) • eit«t£2«ltn en* tko OHO* of too attar at tfcoo W 



' wfelfc 
thao Jtttt 



of 



©nta*- tk# ekkt -peekett - 
aooonn* w. a»« the 
ooltolooft'oi^oololoiotto^'-liolKy. ! iii qk'tf 
ko - fo,lH Kf^M^lt^t ttof^ 



tooctoot 

dots » 



to 



data oao or 

Of 



'jjbnW< ''..yu^^^^Ojboi^^h' " 
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Fomtaros of tko Coovcllaattoa AlgoHtha 

This coortimrttan akttxithai praaarvaa tha pfcilosophlM of packet 
coaimaaJcatloa arehltactara daatga. All ooordlaatioa iafonaatioa is p un i 
hstwaaa ataralsttom nodutet la tha form of flaw paokata. Thara ara 90 tlmo 
constraints on tha stwHsttoo modotec, and tho almnlatkn modutes en oparata 
tadapaadaaUy. Fttrtfcsnaora, tha conrttnattco operation* for aach aaodala ara 

- ' ,\~j V.!,,." j ?>q, fci. > ' . .. ■ 

vary stoapla. Each ahmatatlBa module parforaa idsatieal co nrdiaattaa oporatioaa, 
which allowi naif ornUtr in tha daulatioa 



Om forth* faatan 1s that a slMnistian avadnat sands taa* packets only to 
nosnisf to whteh tt aha stl^ dsm is t hU i, omd <ho»t tima 

•MMM th» itemsl data^pdam, i This no*^ai>hasio*tle^iiamber 

d^fl^ '= ^-Mjii^^M^gL .. ^^K^n'^^^enA^^aa^'-'O^tflanafetf ^iahafc i a> : -^A^^sslA^^ho^Bw ^^■ol^s^stooo^M^^^fttfko^B^ls^ftif^ i 9sfe^- : ^BAsVft^sisV^BJslsMtsV' V^anlnY? 'laB^BSBBSn 

to ■ s ynchToats a tt m i f t li aa n a is l i f — i n i w*h tas data ta r ais wUm i «. on 
tho other head, ttnw paokata win seat aloag seats COm.ymm********** 
special awssnrsa weald hi reraised to prevent a tin* poekat from strivta* at an 
input port before a data packet havta* am aariisr than ▼slue doss. By saadiag 
tin* paekata along the aonaal roaiainatratlna Una* w« ass tha first-in, 
first-out property of thaat Ualu to snsare tha propar s s snoaclag of time and 
data packets. 

■ffloioBoj of Ooordinsttlon 

This coordiaattoa atforithat is rathar laafflclaat ia two raspacts. First, a 

"-. .iv ii-:.-- ■■ ■.' *.7i-%*-r-- :■■>"**■■?' ■: ■-■. . ■■*:•-■■ .,'.■<■■■)■ ^- V ■ .*;- .. .»- ;..■ .-,.*■.. ■'■■!■ -V ' ■ ^>- .;- :i . ; -T ,^-~.:- ' *.. *■■'? ?"-M'*$fi:- 

larga aamoar of tlaw packats must at samt ta kaap tha stanlattoa eoordiaatad. 
of Plgataa ».l aad «A a •ottoiJa* aaaaa ^thao paakata 



oovld atah tin one*. Tills canaM 



both a oaiay l* fea 



m m 
For 



packets would \m 



in flgoia 3.3 
not fin umtil 



H 



Tharafoia, fea flttaf of Am artttar at 



with valma o»friS***> + 2 - .7 



Ow 



tha aombar of tin* 
«om not allow all 
tha two module shown 
at tha nm Haw. Tha aftear will 



a aaekat with ttna < 12. 
11 onldte dwolatod at tha 






»»» »» »»> » »i<« » i h h i !»».< >t >»i. » i» » « » »ii> « i n « 1 1 i k »i « i »i » « » « » »» » » »»»»»»»» » »»»» 





prapattlaf of tha 



^o) owhwo -wr <wmo ajaftjp(P(pji>wi^^iwa;5**o.iwpiP**** 
bat** ataratatai. wife fea ooordlMttcm algorithm 
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daacribad only two pr op a rthp an aarunad about tha modulaf to bo Hinulatadi 
thay will not produca any output packatr white in tha wait jnoda, and for aach 
mcdula than to aou* Minimum dajay tlaa aaJn batwaan whan it flnj and 
whan it producai the flrat output packet*. Tft^ o| conraa, makes the 
co or d inat ion fraoatmiaa nry aUepte, but it creates tha two tnaffictenctee 
ment io n ed above. If, em tHa other hand, we make un of the fact thai ah ADD 
nodule cannot fire without first receivlmi data rackets on botA input porta, 
then for the exasnte U Flgtira 3.1, tba aarlia^ «oaatb») time for it to produce 
an output packet could be calculated ai 

- eex(fl,18) +2-12. 
Tha tinta packat (12) ooaid ba ant to tba arbiter^ siautettom module which 
would than fire tha artetn at time 3 and esmf the packet J»,f> to the edder-a 
simulation module. Furthermore, an ADD nwdute cam only ebaorb one data 
packat at a tinw from oach input port, heaps, tha firing of the module at Urn* 
If could bf simulated avan though l ftesf j - 5 < (/»r# . If. By nuking tue of 
then two particular proparttai of ADD incduks, only one time packat would ba 
transmitted In tha simulation, at opaoaid to tha original 



Of course, thara is a traoe-aff batwaam tha onanlazlty of tha coordination 
proeaduraa within aach jnlsnbiy^. nmulnb^ 

coo rdi n at ion. In tha nuvt extrama oara, aach riamlatton mjodula conld aUnglata 
tha antira ayatoni intamally to datennina whathar a particular uudula can ba 
aafaly find. Tbia would cartainly nunimuaa v tha anwunt of coordination 
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information jamt Jarteeeaa starakftm ■adnlet, tart it would tat overwhelmindly 
complex, la. Chapter J, miml eatta»aitati to fee po a ao ee il coordination method 
win he rtMwrttai Ana aamhatU aWte* on roflaieai wti which do not Increase 
the compiaxitr much but to tiffimi the afflrtoaar ejittif*eantly. 



Corroo tnoa a i of JipJ||grtp^JBfa p|§w i |to , f; . 

S«Bmn^^aV^MS)ejeJsmsjBn#"aSBnihp . j flPm(Uj3# ■^an>SJ|p» ; 'PW"*'W'W(|P|"aBm((|p ""'^'^WHBIr^ 8 flPjjPi? :^fl^''iPP''^flHp^H^'- il ^^> .;if ,,1 ^^^^^.'''' : ^^^^'^^^^^^ : *'^(^^?^^^^^^^ 

A proof of fete la jW i WH d 4a jjeanMr 1 and will :ht described briefly how. 



The proof «ppUoi oalx to aodutoa whom output history end final stete are 
functions of fee Input liistory and initial state, t^ module cannot contain any 
s to cha st ic _ finnan ti Iwiiw , for a pi oil of chalets of random 

variables, th« output history and floaT state of a motata wiU always be 
functions of tit InillH item and input history, » wham com tho proof wHl 
apply. IT fee ttoefcaftte jiubissji mm stmHUtad in such a war that the random 
variables ate eheaen with fee nan* pzetsibaitjr m the/ would be in tho actual 
system, tlm alaHMnon w» atoeaaum 



lb formally daeertto the operettas* of tie ectoal modules end the 
ajmulafemt of these madtttas. ate wgiiliasnal* a*e apaelftadt ferae for Che actual 

iiroflii]oe :: iiM ^ iff fflam mtfflflet 

For the actual m o dttl ai, the l e ^uii em wto ata> 
1.) Fa Bctl e naHty of Cutouts The output history and final state of a 
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moduls dapaads only on tha initial state of tha modulo and tha Input 
history. ' V 5.J 



2.) M oa s t t nwit y of Oataatt Tha output of s modal* at tin* r cannot ba 
affacted by input wcaia a i after tt*» *, ' 



3.) Flaiu Mays Tha output of a modulo at than r cannot ba atfoctod by 
input rocaivad at tin* r. la othar words, thorn soot ba a finite dolay 
b o tw aa n tha taeatyt of aa Input paehat 'and tha pro d uc ti on of an output 



If a modulo asttefisa all tbroa of thaw rofilrtaiaata, thorn tha output history of 
tha awdula up te and Incladfta* tana f is « nosattoa uf «ho battel state and tha 
lapmt history mp to but not lBctadtnf tlma t» 



_ tor tha nwaajai te »» steaatetea «>• aot vary 
rastrtetta* Tha ajaailwahitr aft ootaut rarateaanwt- sttepty impllte that a 
modal* caaaot look late tha fator* and pmdftst wliat input will an***, nor can 
It rateaot or alter any auteut paehats ones thoy ham barn asat out. Tha flnlta 
aatay raaulramant states that a modal* cannot raaet tnrtaataaawnsly to aa input 
p a g h at . This is tra* tor any jf ^a toa tly asaannnbla — Mal i . Tha fa aa U a naU ty of 
fptpat rarnlnan a t j m pH a s that tha modate eaanot saaatun -any 4uput 

••■•^^•■nnwuampm *^**^^^ •an^an «HV nawnWanl oWaa^aT dnaaan ■ ^W^p^ppiaf* 4aV*aTf/tean^ 'W* •oo^ manj^M* fVWt 
*■* ***^****"**^ *■**■ a^p^^fjnaw nfVauanpPU' nMPano^aoun ■a^uufr , v ^^a^dajama^onp *^B^™^*^^^*^w Wap*lh*^an> W 

consMar tha opoiattoa of tha nwaula for « parttcohn oaolo* of rowitom j prtablos . 
For tha simul a ti o n of aach modult tha raaoiwaiante arat 



i. Comet Moduls Stanistteai Tha itaml a tten or u asadula must produce 
tha samo date psekats with tl*^ar* ttete V^^ artejfccniodula 

would for tha saaw input coadtttens. That is, sail at i tho rtmutetton of 
a nodal* pradmcas a ajpaliltm aiitnij JTO wjajp » starts to itttei stf 
S t and raa o W as aa tapnt atarakftten history Mi whara an of tha data 



valwas. Lat 



'/** - i**, i*"*' 




Thit is, 0hwrt 
«T th» tt»«t aorta of 



^^p»WF^ a^Ba^^F^P^aa^Baa " * ,^ iPPaT*^»uwaau* ^ 



- ■», - * *& * 



who* it atarts la 
HI - data(HSI). 




2.) Corraet Ordartaf 
tayut yart if a 




4$ ■!• imp *?•» 

ataaJattoo Makuy HSI that tf (jftaaf - 



aaaaala Mcaivaa au laput 
(tla»U) f arantmally • ttea or 



output "palt 'fMt' 



ftaal - •, la wafca 




Ibn; *t * pnrvad ; «tta* : ^ier : -«ay 



* ■„■*«"*•" • »jp- 



a^aa - MlaJllaaaRtal v ■%ia1tuIa1tlBaf' ?; '*'^wlll 



Tati ti ftttai M M 






•"*®" 



I II I ■ H » ■ I 



ww ii i » > ■ i %» li ri'V i ti ■ ii . i 1 1 ii ■ ■ »i 4 n il n r i t fc ia i i mn uti Wirt Ul ii f I 



- - ,*; 



yr K* 



*5tf 



, fiaHa 



ajaa ■ VravuaaaBa 



:x '■'■ '■; -.v. .i- V"." ".-,■■ ■■■'■ .'■■■ 

- 01 - 



2.) Tito dwttl rt km of each module satisfies the correct^moout* simulation, 
corroafcof^oriwrot i ut»1 »o tt < U t jjjt eortatff sifJMneUm aotufltoBwnU. 

3.) AU rnaimuafcattoa liaJu Tiatajaai shnalsHUtt modumt operate properly, 
ao that If input pott t ft la ooonccted to output port s r thorn h*i A - hso^ 



4.1 Tt* slmvJatlcn locate* a system ttfpvt ateoJoOtm litatorr 31, and 
the a a fua awa of time tiImi mcervod at each system input port Is strictly 



Ut tfintl m M\nitUst t ,tUst k ,...,tUst x ), 



aftor tho system iapnt atmolctka history SI has beau received, whore 
t t ,l),....t M are tho system input porta. Then tha almulatioa module for any 
meditottYia the ma te* v * « m a laus r lO b^l* outou* iM a JJiffl a l hiitory HSO , 
such that 

WiHSQjltflnMl)) . HOf^aei), 

whoro HO* would ba tho output history of tho ronoapmirtlnd modulo In tho 



1.) all moautai in the actual ij*ta ore started to tlto same Initial atato 

2.) Tho actual system noatwjs tho system input history I whoro 

I -aatatSD; ^ - -* : 

Furthermore, If tftod - », tho final atato of each simulation module which 
terminates will equal the final atato of the iMWiespimfllei toodtoVW ''ffif actual 



Tha theorem is proved by Induction on tha oseueaee of time values 



-.%^:/; 



it? AS'W s;- 



■'if— ^Ki'V'"" 



where t« - f, and 

f« < (| < ... < ft < ... is, 
and each time valoa f j, / > 0, Is contained In soma actual or Emulation history 
for the system. That is, f j is eoatoiaed la out of tho fettowiaf histories! I, 
the system Input history to the actual system, H0#, the output history of acme 



..ft - 



modulo Up SI, tha miam i»**t ■>■ alsttea htttery, or HSOj, tha outpmt 
si m u l ation history of MM swiitf s *y x 



Tha tortnrti oa hysolh o rti I*** follow* -far «f l ( c t # , tp . . . , f z , . . . sue* 
Hurt l { i ^Ntt, 

a.) datartlSOjttj)) - N9jfi|?, fur s& sodute fy tod 

b») Either f ( » <». or for *ny dtttpat fort Sjj 



«i**f : ^^ %"%■ 



In othsr words, not onsjrwtti «M ita«to«Hi «BM»«Mr«fl4tl tlw 5 ifetiti§--*f*tosi 
up to and ladudlnt time t { , but la addtttoa the ooordlaattoB. operations will 
citiM Mch ¥%^W tiM ' JHiaTrit in ad sachets with HAS vdtui arester than ft 
from all of iu output port*. Thu« *k» ste)*fejte» aMU k«| v «M4o a 



simulation modn* t«B«t ovdwt with tte* «rta« s t l% m Ion* as 

f| s rytas/. Therefore, «r induction, tte simulsttoa will accurately model tho 
actual system up thwmsjh time gifts*. 

Cemoluwfoai 

By incorporatta* *«• relatively slmpls oosrssaettea operations in tho 



simulation nwdnlet, the slaoJtttoB will owu w lsly medal th« actual system, 
white pisssrilag the iispaitlij ef a psehot 



As a result, however, th« simviatkm night fall to terminate even if tha actual 
system terminates, and the slmulatioa will sa rather inefficient These two 
dtfrteulttes wtll sa dealt with ia tha mart two chapters. 



■^a j^^l -j £ ^n.^ .^ '-'rr^' 



:,„*»• •„ w.,^^.**^. 
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Chapter 4 

Introdootion 

Dua to tha dacaBtralDad aad flat IndapaartaBt aatmra of tha itmulation and 
ooo r d taat l oa opwatfeM, that, ara ooadlttaatvfor wafts* tha actual ayatamt wiU 
avaatoally caaaa all oaaratfem, but tin Upaalattoa wffi coatioua Indaf Uitaly. 
Tha atiralatloB aodmlai oa» fcaap andla* tt|#';jggte# wig* larraartngly larf ar 
tima valuM to aach othar tea* **« all nwduto activity aiaalatkwn hava baaa 



Tot asampla. la qatam of Flgaw 4.1 tka ■jn—ift pott (tepqt port 2 
of th. artftar) hai racaiv* - a^i«y "|Utf 2 ^' ^ V .Sit th.1mul.tlon 
^.Mtte^KaM^.^pdutW A. c^ cl«rly b. 



^ ^.^^ ^ modu^ U 0,. ^t» W, W„ co»pl^. Th. 



«lmttl«k*, howro, wm ^^*ta^ ; -iia''-.ii^ s yfa^ * ti»T ,ack.t 
with v«l» *\nm;mnt - lil to th. fwbtk-ul °'omtorf W Jhto ofwator will 
•and a tea pack* wife y*I» Itur V ltt to th. awltef which will ~od • 
tlma pack* with vata. 183+1 - 101 # lha 1L aa^' : ova^;^$lill^ator, in 



turn, will «aa . tta. pack* w^ *!»• IN*. Uffja^^^t. Th«i th. 



.<•-$„« ,,*•* * 4 r*-- __ .*Jjy .»j1,l#.',-; •"•SOS 

nothing la nally aataf abaulatai. 
hi thta chaptar, tanalaatiaii 
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F10W 4.1 - 
Tha didat 




potts, 

that tin 



_ . .— -. tha dot* nantttt data packattt and tha 

tapat portt rifwm tha aatoat of tfa* for tha input 



wfH » « n t iM«Hr imw&#» n tha actaal ajataai dot*, white 
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transit betwcea the simulation modules. This omalarlont observer, however, 
would not be la keeping with the philosophies of packet communication 
architecture deafen. For out riinnlsttoa, the simulation modules amt send 
control information to each o&w to determine whether the termination 

Furthermore, these tornrtwdton c operations most bo 



Most of the standard methods of determiuine; whether a system is active, 
such as time-outs, or waiting for a marlmnm count oa the number of tlma 
packets will not work for this simulation. There ate, however, special features 
of packet c ommunicat ion architecture modules which can be taken advantage of. 

Connootivit y Clnssea 

A module M 2 can oaljr receive input information In the form of packets 
arriving at its Input ports. Sence if there is no path from module Mj to Mg, 
than the acttvitlas of M 2 cannot affect those of M^ To make use of this idea, 
the meaning of path must be defined more formally, first, a module U t "U 
amnmtd is* a modulo U 2 denoted Mj -* Up if an output port of module M J is 
connected to an input port of M^ There is a tofa from a modulo ^ to a 
modulo %& denoted M f -*► >«, if there exists a sequence 

■l» aljt Bj^ • • • , hj,, Bj, 
such that 

■ f -> M 4 -> I* -» ... -> M g -* 1^ 
All co mmu nicati on with a module is in the form of data packets travelling 
alone; «ut» channels. Hence if than is no path from Mj to 1,, then there is no 
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1.) TtBM packats with valua oo have bM& 
' i»imt por* oT **>«is. I» tfca ctaal C , wh« 
output port* of ether modules la Am class. 

No special r oi a s ni at c at l on other than time packet* 
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The termination operations for the simulation module of the termination 

control module T are as f ollowst 

1.) Perform normal simulation and coordination activities until 
every input port which is not in from_cUss r has received a time 
packet with value «. 

2.) When there is no way for the module to fire without 
receiving more data packets, send test packets (test.+) from all 
output ports in tojclassj-. 

3.) Wait until K test packets have been received on the input 
ports,, where 

K - 1 + £ (itojclaittl - l). 

«i«C, 

In this equation, |tojclass t |, is the number of output ports of 
module M ( which are connected to input ports of other modules in 
the class. 

4.) If any data or time packets are received while waiting for the 
teat packets, continue with the simulation and coordination 
operations for the module. 

5.) Determine the validity of the test as followst 

a.) If all K test packets have value test.+, and no data 
packets were received while waiting for the test packets, 
then send time packets (co) from all output ports of the 
module. 

b.) If at least one of the returning test packets has value 
test.- or a data packet was received while waiting for the 
test packets, then send packets (reset) from all output porta 
in tojclatSf, wait for K (reset) packets to return, and go to 
step 1. 

6.) Once time packets (oo) have been received on all input ports of 
the simulation module, terminate the simulation of the module. 

For every other module Mj in the class, the termination operations for the 

simulation module are as followst 

1.) Perform normal simulation and coordination operations until a 
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port Hence, a total of K test packeti will to cmeted.^ The values of them test 
packets will be teat.* oaly tf bo fora ctf dsts activity Is found anywhere in 
the clan. Because of the way In which tb* rips! output ports are chosen, all 
K teat packets will tw fuuneled beck to T which can then cheek the teat 
results. 

P—tttr— of the Toyielnntton Opemttone 

Thla teralncttOB atfRlthm ; preserves most of the detlrabl* propettlea of the 
coordination sla^ikm. fit particular, Hw a]in1ltt"lMiuil A at#?fnimi the 
requirements for a packet cnmaiuatftatloa atdiltectttte system. Althouth one 
module in each dan is denoted w a temlncttoa control module, It* only 
function la to inltiata and collect information about each test. This module has 
no ability to monitor other modules or enerdsa any active control. Hence, the 
simul a tio n modules ere still autamomout. Fnrtheratora, all communication is by 
packets, and the operetieas do not depend on any ttmln| restrictions. 



As with the coordination algoritiim, aS termtiatloa control Information is 
sent over the normal data channels. Thlf svetdi th* premem of monitoring the 
communication links between simulation modules, lasamd, the ftrrt-in, first-out 
property of th*a» ttakt ensure* that no 4*u poekets will be overlooked while 
they are travelling between s hanls t loa medulla. Hr special hardware la 
required for ternriuMsmf opw 

One undeslrabte feature of them teruuaetton operations is their dependence 
on the overall structure of the system to bs stmulatei. Whereas the simulation 
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class, and all modules at some tin* have ceased data operations. Thus tha 
second test cannot be initiated until tha fin* termination requirement for the 
class is satisfied. Each successive tast osaaot at initiated until tha previous one 
has completed. This not only simplifies the termination eyarattana, it limits the 
frequency with which tests can be initiated. 



Oorrootneaw of tke Tenuinntsoa 

The addition of the termination 
not Interfere with the stumtotioa of 
simulation to 
following 



If the 



to the simulation modules will 
system, bat they will cause the 
This is staled In the 



TJtegrem. £. Correctness of Termination 



> < Hl< 



a.) Suppose a simulation is performed in which the modules to ba simulated 
obey the three reanlieamuist functionality of output, me oe i c ntei ty of output, and 
IWte delay, and the sl amWlo a a nd ■ i i iif l lanf i a jshiillysh^of 'eich simulation 
module obey the three reeuirementst eertost enuMe slasalnloa, correct ordering 
of output packets, and eeneot t9 *r* M *to t > mt m * **** * a«» coordtnation 
operations of a simulatten module cannot causa time packets (») to be sent out 
hyfl^ .ri.w^itotf misiuln unlaw 

Then the addition of tenaiaattoa operattoas to «ae atmulatidn modules •§ 
described in Chapter 3 wlU not cause any of them requirements to be violated. 



h.) If the actual system mr reaches a state la which no modules in the 
system will ever enter the ftrmf mote ualem attte ycckstt sin received on the 
system input ports, then every simulation modal* in tin slmuUtloa of this 
system win eveatuatry pfotuc* Ham tuckets with value w cat sll outpuf porta, 
if ell system input pacts in the atmuletioa resolve tape packets with value ». 
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The proof of this theorem is included in Appendix 2 and will be described 
here briefly. The ternunauon operations for different 
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shown that a test will suceed, ones the termination conditions are satisfied. 

Conclusion 

The relatively simple coordination operations of Chapter 3, which are 
designed to keep the simulation from deadlocking, created a much more difficult 
problem of terminating the simulation. The solution of this problem requires 
both compromising the modularity of design of the simulation modules to some 
degree and also adding termination operations which are more complex than the 
original coordination operations. This lack of modularity and greater complexity 
makes the correctness of the termination operations more difficult to prove than 
the correctness of the simulation and coordination operations. 

However, the termination operations do satisfy the design goals for the 
simulation. The simulation remains a packet communication architecture system 
in which all communication is in the form of packets, the simulation modules 
axe autonomous, and the design is time-independent. Furthermore, while the 
termination operations are more complex than the coordination operations, their 
Implementation should not be particularly difficult, and they are efficient 
enough to have little effect on the speed of the simulation. 
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will still apply. 

Modules whleh Compute Monotone Functions 

Many of the packet communication architecture modules which have been 
designed to date compute monotone /Unctions over their histories. That is, if 
the module produces an output history HOj when given the input history HIj, 
and an output history H0 2 when started in the same initial state and presented 
with an input history HI 2 , where 

HI, C HI* 
then 

HO; C H0 2 . 
Modules which compute monotone functions over their histories are 
characterized by the property that the decision about which input packets are 
absorbed from each input port and used in a particular firing is independent of 
the arrival times of any input packets. 

In particular, any determinate module computes a monotone function, 
where a determinate module [12,18] is a module for which the sequences of 
output packets sent from the output ports depend only on the sequences of 
input packets arriving at the input ports, and not on their arrival times. For 
example, the functional operator and switch modules of Chapter 1 are 
determinate modules. 

One would expect many packet communication architecture modules to be 
determinate, since they embody the ultimate form of time-independent operation. 
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port 1. Instead, the firta* of the modal* at tin* 28 en* b* simulated right 
■wiy, since aajr date pocket received <m tepat fort 1 would not effect tills 
firing. 



As loaf *• tali n»to i i firtog fair tew not coos* any of the three 
totlte k *im«neamte0iaw^ wHii ttemUtion, 

comet order** *f eotsot packets, end oetteci ci atshuftan, the Corroctnow 'of 
Mwnlrtto a Tbeetem ornate! 1* AjHuila 1 wffi *tlfi ho*L To show that tills 
modiflcctkm will pot violate the correct mMi ilsa aa tla o toquh o moat. suppose 
at some time a s t ma l ottoa module for • module which computes a monotone 
function hss received sa inpat history HSI\ whom HH* CHS, tho input 
simulation history which will ultimately be received. Then If aU posslhlo 
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firings of tho modal* oa tho oats paohott ara simulated, and aa output 
simulation history HSO* is produced, tho offoct of thost activities will bo to 
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m* -detsrtoiM. 

We know that 

HI* cm, 
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module for an ADD module has not received any data packets, and tiast^ - 188, 
and ffojtg • 18, then the firing of the module for any time less than or equal to 
188 will never be simulated, even If a packet with time value 11 is received on 
input port 2. The coordination operations are overly cautious. They assume 
only something which is true for any module - if there are not sufficient 
packets for the module to fire, then the module cannot fire before the arrival 
of the next packet. If the coordination operations could take advantage of the 
firing requirements for a module, then it could often calculate values of tout 
which are higher than those obtained by the method of Chapter 3. 

Any change in the method of calculating tout, will inevitably be more 
complex than the calculation 

tout - jgj, ltlast k ) + dtlaj. 
Hence, the strength of the calculation, that is the closeness to the maximum 
possible value, must be balanced with the simplicity of the calculation. The 
following method of calculating tout represents a particular compromise between 
strength and simplicity. It is very simple yet seems to be reasonably strong for 
many modules. 

Expressing ike Firing Requirements 

First, a method of specifying under what conditions a module might fire is 
required. For any module, a boolean-valued function F can be given which 
takes as arguments the values of pp ls/sn, where pj is the number of packets 
present at input port ij. If 
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form: 

*lPvP2 V - 



HfjfeCjj) A lp2*C 2 j) A ... A (p M iC ni )] 

v ttyjlc^) a Ip^c^ A ... A (/^ic^)] 



in which each c^ is some constant greater than or equal to zero. This form of 
the equation is called the sum of products form. Note that if c k j - 0, then the 
predicate lpi£c k j) must have value true, thus these factors can 1m omitted from 
the equation. Equations with all factors of the form lp k *Q) removed are in 
reduced sum of products form. In the preceding examples, the functions F^,, 
F,^, and F tr(M are expressed in reduced sum of products form. 

Many functions cannot be expressed in this sum of products form. In 
fact, only those functions for which 

Ft ^i•A2»*••'^s , " true 
implies that for any values, k lt k 2 ,...,k n i 8, 

F lpf+k v p^k 2 p M +h n ) - true. 

can be expressed in this form. However, for any function F we can always 
find a "weaker" function F', such that if 

? { Pfrp2 P* ] ■ leas 

then 



f'ipvPz V ■ true - 

and an equation for F' can be expressed in sum of products form. 

A sum of products equation for F can be translated into an equation for 
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Even if the function F has value jQjf at some point in the simulation, if the 
data packets with time values less than or equal to y^ <"«**> •*« not 
sufficient for the module to fire, then no data packets can be produced with 
time values less than or equal to Jj£, ltlast k ) + dtlaj. Thus, the calculation of 
tout must take the maximum of the two predictions of the minimum output 
time - that based on the function F, and that based on the values of tlast k . 

For example, for the ADD module the equation is 

tout - MAX( m\n(tlast t ,tlast 2 )*<i*laj i Nx(f ]] ,( 2] )W<J^( ]. 
For the arbiter, the equation is 

tout • I1AX[ *\n(tlast t ,tlast 2 )Hltlay i »in(r il ,r 2i )+<f«/ay-c ], 
■ *\T\Ulast if tlast2) ♦ dtlaj. 
This equation degenerates to the original equation for tout. Finally, for the 
function F tPtta the equation is 

tout - «AX( ^ Mast k )Hlelaj , 9+driaj-i J 
- ,■[£, Wert 4 ) + May. 
This equation also degenerates to the original equation for tout. 

Correctness of the Calculation 

this modified method of calculating tout will not cause the simulation to 
violate any of the three requirement* correct module simulation, correct ordering 
of output packets, or correct coordination. Hence, the Correctness of Simulation 
Theorem given in Appendix 2 will still apply. Clearly the correct module 
simulation requirement will still hold, since this modification will not affect the 
data packets produced by the module in the simulation. 
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loops a number of times just to fire a module once can be reduced. For 
example, suppose the module Mj of Figure 5.1 obeys the function 

Using the original method of calculating tout, tout - nin(19,188) 4-2-12. Thus 
a time packet (12) would be sent to B 2 , which would send bach a time packet 
(13) and so on, until after M 2 has sent 30 time packets, it would finally 
receive the, packet (188) and the firing at time 188 could be simulated. If 
instead we use the calculation 

tout - MAX[ ein(18,188)+2 i asx (18, 188) +2-8. 881 ] - 181.999, 
the time packet (181.999) could be sent to Up which would send back 
(182.999), and the firing of the module could be simulated. Thus, the 
reduction in the number of packets sent during the simulation can be very 
targe. 
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Chapter 
Conclusion 

Insights and Afterthoughts 

As has been demonstrated here, it is indeed possible for the simulation of a 
packet communication architecture system to itself fulfill the design 
philosophies of packet communication architecture. The modularity and 
time-independence of the simulation allows it to be performed by virtually any 
computer system which supports Intercommunicating processes. Furthermore, 
the operations which must be performed for each module in the system are 
reasonably simple and therefore can be executed by small processors such as 
micr opr ocessors. 

The methods which have been developed here are very general as well. 
Few restrictions are placed on either the characteristics of the modules in the 
system or on how these modules are interconnected. Moreover, the methods are 
provably correct, which is an important feature for any asynchronous, parallel 
computation, due to the numerous and often subtle difficulties which are 
encountered in the design of such systems. 

The coordination and termination operations are simple enough to use only 
a small fraction of the simulation module's processing time. However, it is 
difficult to estimate what fraction of the processing time will be spent waiting 
for the necessary time or data packets. This will depend a great deal on the 
structure of the simulation facility and on the system to be simulated. Thus, it 
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The design of overhead computations for parallel systems is still in a 
rather primitive state. Other parallel computer systems, such as niiac IV [3], 
are structured In such a way that the amount of overhead operartions is 
minimized. These systems contain central controller* which tightly control the 
operations of the components, thereby avoiding the need for the processors to 
communicate their status with one another. Because of the rigid control 
structure, however, it is difficult for the user to program such a system to run 
efficiently. These systems are suitable only for applications in which the 
structure of the algorithm closely matches the structure of the system. 

Packet communication architecture systems, with their decentralized control 
and time-independent operation are potentially much more flexible and general 
purpose than other parallel systems. However, along with this increased 
capability comes a need for the components of the system to keep their 
activities coordinated properly. The design of overhead operations for these 
systems requires an approach which is totally different from those used in 
designing traditional systems. The overhead computations incorporated in each 
component of the system can utilize only a limited amount of information about 
the rest of the system. For example, the only information about the status of 
the rest of the system available to the coordination and termination operations 
of each simulation module is in the form of time and test packets received at 
the input ports. Overhead operations which can be "modularized" in this 
fashion seem rather foreign, partly because they have no locus of control. 
Instead, the operations take place in many locations simultaneously. 
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means of programming the simulation modules la needed. Ideally, the user of a 
simulation facility should be able to specify the operations of the components of 
the actual system in a high-level language, such as the Architecture Description 
Language of Leung, et al [14]. These specifications would then be translated 
into programs for the simulation modules by an ADL compiler. The user should 
not be concerned with the coordination and termination operations, nor with the 
details of the module activity simulation. Fortunately, the coordination and 
termination operations are simple and uniform enough that they will not 
increase the complexity of this translation greatly. The major difficulty is the 
design of a language which allows the specification of a wide variety of 
systems in a concise and understandable form, but can be translated into 
programs for the simulation modules. With the increasing Interest in parallel, 
asynchronous computing systems, a convenient and efficient means of simulating 
them will be required to determine the best designs. 

The other potential direction for further research is to apply some of the 
techniques and insights which have been developed here to other areas. One 
direct application would be to the simulation of systems which are not strictly 
packet communication architecture systems. Some systems which are commonly 
simulated, such as air traffic control models, have the essential properties of 
packet communication architecture design. That is, the system, can be 
subdivided into a number of components which operate independently and 
communicate with each other only in a limited and well-defined manner. For 
example, an air traffic control model can be subdivided into geographic regions. 
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Moviat beyond the field of slaulatlDa, there are, other areas to which 
these teehalouoe and insights cam be tinted. The proUenu oT deadlock and 
mmteraiMttoa which wm d^t with hm ooc^ f|wpifpt|r la PvaUtl, 
asynchronous untai, The concept of addiag mni i ed o p e rati ons to a system to 
prwwt these pt ohlomi en bo applied to other systems. For example, the 
author [4] has Identified a deadlock which cam occur whoa the data flow 
language of weug [ftp] is extended to include both cycles and aottdeterminacy. 
This dea dl o ck, occurs after all computation by tho program is completed, but tho 
program fails to recognise that it is atta to terminate. This deadlock can ba 
avoided by addiag more data flow actors to tho program to perform tho 
a o r oai eiy overhead floatation! end terminate tho program, la fact, those 
overhead computettomf are very stellar to the termination operations of the 



To design the overhead operations for a wider class of parallel, 
systems, however, acre general tenhafctnos will be rofuired. 
Ideally, a programmer should be able to specify a program In a high-level 
lan gu ag e which will then be compiled into a auaiber of separate module 
programs which include all of the aeeded oioihcod opoistlwm, These programs 
could then be loaded lato the modules of a pocket communication architecture 
system, aad the systaei would thea execute the prograai la a highly parallel 
fashion. Translatiag high-level lsnguagos which include such features as data 
structures aad recursive procedure calls late individual modulo programs will 
difficulties. 
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Thus, while the focus of this work was on simulating a particular type of 
computer system in a particular manner, some of the techniques and concepts 
which were developed here have much broader areas of application. 
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Appendix 1 
Correctness of the System Simulation 

The following proof shows that the simulation operations of Chapter 2, 
combined with the coordination operations of Chapter 3 Will give a simulation 
which accurately models the actual system. 

Before proceeding with the proof, some additional notation is needed. For 
an input port i A of a simulation module, the value of tlast^ is the last time 
value received on that input port. Thus, for an input port simulation history, 
we can define a function Tlast where Tlaet(hsi^) equals the minimum value 
of t, esrsoo, such that hsi A (r) - hsi^. Similarly, for an output port o r of a 
module, tl*st-wt r equals the last time value sent from the port. Thus, a 
function T last-out can be defined for output port simulation histories, where 
Tlaat-out(tiso r ) equals the minimum value of t t Sstsoo, such that hso r (0 ■ 
hsOf. 

Finally, for a module input simulation history HSI the function Tf Inal la 
defined as> 

TflnallHSI) - ^ (TlastUlsi^)), 
where 

HSI - <hsi it hsi 2 . • • . ,hsi„>. 
This function can he applied to system input simulation histories as well. 
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8».f 



%~.i :;*&&»& 



whaia HO, U ,U» /mtwt Mftprx^of Ilia ietnaL*QteJa wh« it ataxia la 



tha aaa* ^U^i^W^I^W^nS^m ' 

2.) CaaaaaWtiaalaaaavaf Halil fMJalii tf taa M i il fa u ■irlia'iia at aach 
of a' amlala hi tha a tPn 1 t* t< ya hava a tri c tly 



lapat part of a aatUa hi tha ajanrtattoa fcava atrktljr teenaataa; tima 
valaaa. fhaa tha ao3aa*3aa*afeaiaaatt,2aaai aaah oatsat tort of tha saodala 
la tha ataalattaa wffl hava atrtrtlr lacJaaaaa ttaat valaaa. 

3.) Gorraat Cai ta Ta utt o ni Each oatpat part of a sofala la tha simulation 
will airaataalfat aBaaaca a flaa ta aatai'atihat with •>■** . iralaa ^**aafar 

^**^^*^* ■*^»^w ^■v^'^Bv^'aa^'^^'V a^^a^*w ▼^aa*SB^p a^a "aaaB*ai atajahaBa ^^alWBawWBw alv , a B aav"av ^aa as^rv ai^a^fa"* 

a* asaa. Jha aataai aa&artlLaa^baaaj 




oatpat part a^ 

•';j.,«t,* HfWaaj-aut|aa^yjf ^^f»4ipifN|P*§f£^ ; ^ t 
or. 

Tlatt-ouHBaop • ». 

Tha ahaalattea «a4 coordlaatkm opaTatlaaa (without tha tanalaatioa 



oparattosj) pn ai a tat la rhaptaw S art 3, atttafjr aQ alx of thaaa lafahrasiaata. 



tltt ,a.i»S -.Ji'if *>,* » v -?'•', <J fli-V .-*.??* ■:."'?• 



aa leai aa tha atotatoa to ba ahaalatat aatlafy tha flraf thraa faaalraawata. 



Flrat, tha siaialatlaa opaaafiaat da^lo pai hi CTaaptar S ilffi gaalaataa that tha 



ri ulraaam la aattaflad. To aaa thla, aappoaa at 



aotat la tha ataralattea. a alamla **"** —■*<»** aaa xaaalaal -a alaaalatiaa hlatorr 



• I* 



HSr who» Mil* C tt5I (t* *t^ &»^ W*r? which will b. 
raoalwjd by tha alaialatioa BM«ute.> Aaniaiiai pa^kta^rrW af' atcli laput port' 



- oe- 



with strictly t%umdh&r#&»-V$!$ii!k< % HL 

tm* m if tWI # ) * JSSl Mara , 
no new packets with t**» bjal than s# il to m* -wiHkba roeefced on any 
Input port. Br the firing ruim for^ ai^^ 

tin* tfir* cannot W ilmafc«ia. 1ft#^ Wfa. Thus, wan the firing of the 
module a ifln* dtp* is UbiiIHwI ittaa iMMtf W&lttjffr*) haa bom 

.;■.,■ ■?; - ■ „ j^a^^- ^«:r .*■■■■*.■.= ■'■*■■&- .v*r-v:--. *.>;■■■■. ..-.■■■.■. 

receive*, ftsiultlnt iha alai aTailaa urn i ir ill ilia iftjia fti ■ Hi I iij nT the modal*, 
the proper output packets will br fit**^ fut4eru*re: Mot the- simulation 
mod*!. )»• »oat*ef 4he tntlra 1 amue*** " 



^K?*'. ■'■%■;' 



(pin/- 



the firing of the uwdule for all valuaa of | will be simulated. 

Hance, all ontpat paokat* wttk ttuw vetum 1i > ^tef wUl bo 



*#-' ; H:'t*. ;,V l i'W.:.v'' ! ''''#-' i »**fe ■'-- 0^' : ''&£&''% 



prodttcod i itipoif to tm input «jn^a«tion |p|itt, , WMW * <*•* 

? J * ^ -<A« *fe- -■;,,■£ ■ '' ■'■'■'•'^ . ■ ■-'■■" 

■ ■-.^■■■■■i : - ■ ' ¥:■'■..■■• 

Thus tno ilmtttatton wffi »rti«fy tbreomif Modfk liwoln i on rodulromont. 



m tno Input packets to tt* alaralation aoduto aro OBnacUy ordorod. laat U, if 



Tho aacond r^tilrwwat, eorraet ordartaf of ootput paekaU, la nurt as long 
1 to tna almiilrtkm aoduia ara OBrracOy or 
an output port e, of Oka alnralation aodula first produeaa a pacfcst p- and than 
a packet p. tkan^ tkt un» .uafna. In »* awat ba laai than t% the time value 



In p«. Toehow^thm, .four cssa* must ba ___,.. . 

1. p« and n* a* bath tta* packata. 

Than p§ w«B ir #ri£'**»*Mi - t r - 

2. p x Is a dau packet and p 2 to a uma paekat. 

As in case Kjfc mm ba_ .s|nj .only Jj^p ^^i tA -t^ 
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3. pj end p a are both data packets. 

Aammlnt; the sthtbletkm moWto tettsfler the correct module ttnratation 



regainment, data packets will alwapajta produced ia the proper order. 



4. Pj Is a time pocket and Pj is • data packet 

P| wa produced with a time vaafe fj - "*aj» + dfcty only if the module 
could aot poastbljr fire before or at thue tmtn. Tha actual module always 
has a deUjr time ixaatar than er igul to ««taj ^ Jwtwaaa firing and 
ptoduclad output packets, hence ^am^m^^^^mOf. aot said out 
a data packet. Pj with tine Jg 1 fj "tram " HHpi potr ^ ' 



ft* each of these four case*, the slmvtatfem will satisfy the correct orderim of 



The coordination operations also satisfy the correct' coordination 
reouirement. If tl» sitattletton arcduW teceh^ tt 1^^ 

With 

f/Jnsf - Tf InsMlBT), 
than after all output data pockets hsra been produced, it wffl send out time 
packets with value ■'"" 

tout - tftml + dtiv), 
from all output ports for which tout > tkuhmtu Since rfetef is fleeter than 
aero, either tea* > tflml, ortat- (/tasi - «. Hence, after the lest time and data 
packets have been sent from each output pact «j, either 

tkUH**] * tatf »#«*/, 
or 

tbuHM j - toe* - (/Ins/ - ». 
Thus, the correct sss r a HweU s n mmti a uieai wUl be 



A proof can now be Uvea which shows that If the modules to be 



fftfflnlif^il satisfy 
aattefy tMt thm 



,ni ta* stapilatkNU of Uun modules 



^^^^^^^ ■ ~-^^T^~3&W^^^SJQfZ- ' "' "^^IPPPj- ; -^^T^'i ^PPP^^'^.' ^■f^S^r^^^' ; 



Thaofoin 1. Goaiadtoan atf Slantoina. 




MtnrtkUy of outiut, finite 



2.) Tho i lwylrttoi : «sl oech modute nttaftei tin eorroet moduk simulation, 

* »< %■ i MMti AlrfMtei Of ■■ami l^mAmI* md AMMOl mMGdtostfon — ■!—*—♦« 

opmjitojijojtorly. 




port a 



h»ii 



^syatoaytopat stom l stto n history 31 and the 
teoatvoi at sosa djanm toput port is strtotly 



Lot tftiuU - TH«M3I), not !■ $tea! afiuli tin mnHprt -ftaal ttmo valua 
reostood fcy any ,sa? tho ojeteai toput potto duxta* flat a l ia ii laiaio . 'Ttam/'-the 
s tmuiat nu nodum for say ate*»^ t^anduw e 
history AM; sanVtadt 

dataCHSOytf^w/)) • flO/tymafl, 

whm HO | would to tin output hiftory of flat 



1.) All 
as the 

£.) The 



Furthermore, If fllea* - «, un ftoal steto^ «^ 

tenaiaatoa teffl usual the ftoal state of the ccmnnndlin andun la tho actual 



module la tho 
to too sun initial state 
I. 
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Before tilt major part of the theorem can Je proved, two lemmas an 



Mi<IM W^li 



ifmma. JUL. Cornet Ontario* of All Packets 



If the simulation of each nodal* istisfiei the correct orderiag of output packets 



lift " i iiliijp iiaii'ifliiB ***m** i *t ■ rif if ^i^' ■f f ^- ^i*- -jMiiinft, operate 

produce pockets with strictly lacwsslad tjms wteex . 

Proof of Lamma 11 

The proof will follow by ladoctkm op the sesnence of packets which an 



observer would set If he wete to sisxatamaoosly Observe the output ports of 
every simulation module, This issuance would bs of the form 
frft <*».•«.. Pjt... whore p/ is the fth packet ol o ai i pd . la any physical system, 
no two pockets eould appear at the exact same time, so the packets will be 



totally ordered m the*- ^fhe setoeaos of peciets seat f*em" w*& tatput port is 



countable, as* there are a finite aunbar of oa^ot ho system, hence 

the sequence Pj.p*,... »» •» countable. This sOowsir to perform induction 
on the 



fiajdji IaitleBy, no output sort* aavs produced aity iackats, thus no ordering 
constraints have ban violated 



Indnctlom Assume the obssrvar has ssea the sseuenee Pjt#|,....p( and op to 



this point, all output polls have produced sachets with strfcgy iarreeriim time 

"-'■-"■.'"■' '■■■■-■ ■ * '* w J , TjSf&LVi * " *'" $*'""'- ""."iS f -> 

values. Then, by the flrst-in« first-eat pro p eitf of the coauraaiceticm links, all 



&.' I*. 



•&■'-.'**■'■:■'■■*'■ 



input 






aO 



packatf with strictly 
tapa* port* havo xacatvaa 



. -.^al^^J^^U^aa^r,...- ■ •-▼^jftSlBfc^.J 



»l#l 



s. ___^._-~| ^^ ^^ j^ w ^ h gfrtctly 



t£na lafeaM aa to flUa viaL inaaak^fih1a.atonilaBlaa aMalalat<aatlaflaf 

&l ^vfj&- Asm w #?ift* ■ mt&m^AP &m sjpizmwz* 






output port praviuvaljr. 



Tfcus»fc/ 




-v^Sacs? 



;|l':. ;Sf»?S 



.SavsjsMfo Jspfei ,4*\ •** . ; - * 3 cs**^ - 



TT 



■ ««■/ 



If a mM« jattofto* 



^toMtoialsa* Btoaaaa*vaattoBhMb'' tlM 
"" " ---- - by 





^.*<? #'»!*<*£? 



dototHM (*-«)) - HIU-f>, ft* all •>«, 



I s TflnalCWI). 
Initial ctcfe 3, 

dOttMSOUH -alMa&» • ff^' r,r*:> -^.^ —.. 

'W|h-teiit^outo^i ateatoJto* htofcuy at taa *»utotton modulo after 
racafvta* IOI, art IB to tuo output ataaiattaa Mart? of tha actual mooute 




Tha Mm bohirt thto lauaaa to that tha atonu l atlo a eaa art arill 

*nr ;^l«t?%ii«r ft© 1fe ^^«|ter Jisswtstil' ^li^lifll wit *<f* «jsw*fi* .:«.« 



tha outsat ataiulattaa atoaanr MBit 



HSICM 



- 101 - 

hu ban nctivwl. That it cm produce the output rinmlstlon history up to 
time i Is guaraatead by the three reaulremeats a* th« module That It will Is 
guaranteed by the correct model* i waajUca refuiremeat. la order for the 
sia n la t i oa module to nttla it has reeeleed the satire laput tfjttulatiott history 
up to flaw 1 it may rotuir* P»dwt« with time values greater then or equal to t, 
at is stated la the coedittoa t i Tflnsl(HSI). The ctmulatioa, however, will 
oaly use the paehats with time values less thaa I la calculating the output 
values with time values Ian thaa or equal to t. 

Let HI' - datalHSI), and 1st HO* equal the output history of tho actual 
aaodule whoa it starts la state S # sad receives the iajmt history HI*. Thaa by 
the statement of the lemma, 

HI(f-«» - oatatHSI <«-«)) - HT(r-a), for all «>8. 
Hence, by the three reaulremeats for tin actual Module 

HOMf) - Wtt). 
Furthermore, by the correct module rim a ttll e a requirement, if tflnal - 
Tflnel(HSO), thaa 

data(H30<f/ta*/)) - HO'ty!***). 
By the statement of the lemma, t s 01net, therefore 

datc(HS0(r)) -HOMO. 
Thus ■ 

deteflWHf)) - HCT («) - Hftt). 

This teatma will allow us to look oaly at the laput data packets with 



* ; ^f^;4-?ii^:^ 
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tim« valo- Iw tama f, whom teata* to jana tao ruiriMoin of tao Hmolattom 



up to aa* lachattac *H»> £ 



V- 



wttl b« praamt tr tatfastiML oa ,tfee aaiaoae»vof ttaao 



l^'l*^***** J^*'** * 



whtn f # • 8, am* 



fp < 1 1 < ... < 1 1 < ... s «, 



vfctae i |f / > t, n oamtalaoi la mm oetaif o* afeulatlom history 
for «ho tyataa. Tint J* i, U coatataei la oat of the followlaf afatorieet I, 



On ayaaam lapat ak o mj to tto aeteal ■ya h a* M t the eafcjat history of soeme 
awdole lm the ayaaam Kj» SI. the ayaaam iapat anMoi hiatam or HSO^ tho 
output afcuuiatlea Itiakay far aaao aetata fj. Aa ■uMaiii la Chapter 2, tao 

amy port ana* me a ceaataate 



<*H»fe .« . til '0*i 

lapat aat output pant la tao ayeuam, only 



couatamiy auajr tuue eeftaea com appear la an of 




*#<'l«" *•'!•*»• ■"■» ** no a attm la . wateh attatra as to perform 
OB it 



for aay f ( c r # .f f f { each that r t * gtaafe 

a.) d.t.<KS0j{/^ - Hftjttf^ for ajfhiaatatoi 1^, aari 
e.) Either r t • w, or for amy output port o r 
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That is, tha simulation wlU ba comet thfough tin* < ft sad all output ports in 

tha simulation will produca sows paekat with tinta valua graatar than f |f unlass 

■-.••■■■■■■ ' • * > ..•■ ''A tdJ ; • ' -■": 

f| - eo. 



/ -8. 

a.) Initially, liSOy <8> - HO,*) . tat aawtr hanscy, «*» any modul. hy 
b.) Initially, HSI^W - HI y <8) .• tbs ann*y falstary Baaoa, Tfl«allBSI y («) - 
8 for amy modula iy By tha aertact nii aai n il tu ii raaujraajant, for any output 
port s r of nudum fty 

tl*st-*u r > TflnaMHHjdH . e. 
Thus. h*o r (8) c ban,, for aay outpat port in tlm «y*tam. 



TlrfBftlQB' Assusm troa for /, whan t t < tfliuU, prova troa for M. 

•.) Tha Moaotmtty of StanOattoa Output Lamma which has Just baaa provad 

will ha appUad to show that datafNS«yr UJ )) . %lf f ^». By tha laducUon 



dataCHSO^ttjl) - N8j<*i>. 
for all amdulas I, la tha system. Furtfcsrmora, by 4a stawmnut of tha 



data (3D - I. 
Tharafozo, slaca si* o on ai aafcttioa ^i^^ proparly, 

da4afl8sf/%lf « fttyir t >, ;»■'**' 
for aU si mu l at io n nmdulai lj. Slam ao paehats ara proAucad with time /such 
that 1 1 < t < t^p 

<*fiHSljU ul -9)) - HljU Ui -t), far all 8>0. 



:,,-4^*;^^'=»-^"' 



- m- 



iy mm ar **■ 

■■.■■■,':■■■.■■ -- •'■■. ,-,;^'| .J 



..>, '* ,"*= V ;jfcy" 



^f|l. * h»o r for any 



port v.. 



^9HM^ « tepa* *■#% * 



Iw^gff f) * too r d|) c totf • fe*^t* • 



to ostpat 



With Uffll 



mtf. 



ate^t*,**:***^ 



for 



tej§^tof> 1 4i»% 



HI 



for any laps* port, t* ia Ua 



or it te a 



with ttaaaf 



for 



ia tho alanrtattoa 






if'VS-S?.' 



port Jg tat 



for 



for aajr 



lJoat 






that 






.^P**^i^^*^RH8ffit^l*^F^W*PJf J *"V- ,; .-^^^''. 



%►: 



r * 



< * 



port «- of sod ate 



•$ *"*?,' f ^'""'•rs; <">t ■ rv 5>*"' 



r > * * 'i+* 
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tlast-eut r m oo * f M|#j. 
That is, some packet with time value greater than t lH will be produced on 
each output port, unless t M - oo. Thus, for any output port 6 r In the 
simulation, either 

hao r (r Ui ) c hso^ 
or 

'!♦! - co. 

Therefore, by Induction 

data(HS0j(«yino/)) - H0y(ryine/), 
for any module Uj In the system. 

Finally, to show that the module Uj would have the same final state S* In 
both the simulation and the actual system, If tfinal - oo, we have Just shown 
that data(HS0 A (r/Zno/)) - HOitfinal), for any module M A . Furthermore, for the 
system input ports, the statement of the theorem requires that data (SI) - I. 
Thus, if the c ommunic ation links between simulation nucules operate correctly, 
and tfinal -co 

data(HSIy) - HIj, 
for any module Uj. By the statement of the theorem, Mj is started in the same 
initial state S 9 in both the simulation and the actual system, therefore by the 
correct module simulation requirement, if tfinal • oo and the simulation module 
terminates, then both the simulation module and the actual module must have 
the same final state. 
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This completes the proof of the correctness of the simulation operations of 
Chapter 2 combined with the coordination operations of Chapter 3. 
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Appendix 8 
Correctness: of the Termination Operations 

The following proof ih«w> that tlM sdeftleh of the termination operations 
of Chapter 4 , to Hw ^wdattqft BWiiilii vriB mamtaia ihe tt«ectnses of the 
simulation, with the adced fe*ttu» that me statuls^ wtt teratoa* ence the 
termination c on ditions srs SstJsBsd. 



2»anaa. Citf rei lil s st of Termination 



a») Supsees e simulation is rorforaed in which the nutate* to bo simulated 
obey the time revuiresmts. fencUeitttity of outset, omnotonicity of outset, end 
finite delay, and the rt««l*ttoe tad uo w d^U^ ufei^^ W each staulaUon 
module obey the throe josutrsmoal st correct models ens idati on, correct ordering 
of- eelss* seetite/ead o*h Mtt^Hl fw*hemore the coordination 

operations of s siamtssam m nsuti j oaail e ^ jj -l hee ^ i e ei t») to be eeat out 
by the simuletion modula uni 



•■* tKw^r 



Then the addition .of vMmlustton oeeretisas to ih* simuletion modules es 



deeerlbed in Chapter 3 will set coast any of these requirements to be violated 

b.) If the ectuel system ever reaches a stats In wblehHso modules la the 
system will ever eater the firing mode unless more pockets are received oa the 
*y*tem input yorta^tlisa every * of this 

system will eventually ptoduce tfaao pscaats with vatue « on all output porta. 



aFroesT ox Ifsratt ntft 

The termination operations will not affect the ectuel modules, hence the 
first three retruiremeats for the Conectnea of mmulation Theorem will hold. 
As for the correct models sismUUon requirement, the termination operations ere 
designed not to interrupt the simulation of the modules. The only way they 
could potentially osuss this requirement to b» violated would be by terminating 
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th* flnrnlattiTi 



:■&& 






comet 

Ian* at tilt 

th«N last ton mitfH vffl to ▼tolitat 



wlU not afflict tha 



ta. At 



T^^^^Jffj^P*^^^* "JP^^^^^^W^^fl^ ™n^^ *^^^n^» ^^^W# .nj^P»^^0^^ 









*nN^ ■ Jjfc ;. W&, 

2.) No 



J|f C; oaa atnalan tte flrla* of a 



3.) 



!*!;*■ 



modutot to too 
will to mataanaoa. 



r;©r 



to Cj will 






further data 



•5.r»''V-, : -;t.7".o i'cs. 



ijS"" 



aright 



to oaa of two 



tha 



k^ 



<.»§*., 



storalatlaaV ntrtHrtt H* nhtot 



a'':^5*>; 



a ttna 



neteln to a clan to 
lint, a toit of tin clan night 



<•) 



lmput pert i k 



V^*-" *Sf» ^*?S'. , * i 
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freMjelast ( , bafor* any tart has raccaadad, and than procoad to sand out Umt 
packats (•) from all output ports, avan though tha tarmteatfim condttloiu for 
thacteaMBOttfetliM. IHsa**^ By 



tha furthar restriction which has oaoa placed oa tha coordination operations In 



tha statement of tha ti l a Km, tha niilitamiui W***il cannot cause a 
simulation nweula l ( c C, to est* Out tin* paofcotr to) fronvlts output porta, 
unless time packata (•) have haan received oa all input porta, including thoaa 
in freeuei*u ( . However, no stamlstton module IL c C« will receive a time 
packat (») on an input port in from_d*M ( unlaai boom simulation modulo 
«! c &;. eends a <lae» packet to) front ev euftut per* 1* ttjUn^ without 
- any tarmrao ttoa . wp i ii»ims> this wouM hep ion only if ■; had flrosdy rocotvod a 
thaw packet <»l oa aH iaomt porti mcludtnf ***** (nmjtom v Thu*, no 
simulation modal* can ha tha first atanilattoa modula iu2ti*^*laht s te^ien4*' timo 



packets (»). Therefore tha wioidinettoa operations akma cannot causa any 
ai mnla tton modules la a clam to «— *«««*? K % *ih .v^i. cyclaa. 



i^yiaiMifaMfc.afc^-1^^ timo aij - ^■'^■ ihiM modulo in 
a class to sand out time packets (oo) until after a tost has 

Thus, tha proof of the tint part of tto thoora ladpca* to. 



Lb m 



Jorn^oattoaw foajtifff ™**«i» „ T for a aonnectivlty class C * has 
received time packets (w) on eU input ports 1 A f fr— _Hmi ; , and no firing of 

■ ^^^^^^^^^ ^e ^^n**P*^o owoU" , phi foj*OMnu*spJu^ipBu ,noaos^ajn» 'x.ivK>«n ^eee« 
out taat | a chat s <«*•€.♦) from all output ports # A c tajdmin receives K packata 
with vela*, tost,** in leforu, where .**._ ;> > 

K . 1 ♦ £ (|tojBfam t | r l)| 
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and it receives no further data packets while waiting for the returning test 
packets, this means that 

1.) All simulation modules M { c Cj have received time packets (oo) 
on all input ports l^ I fromjclass ( . 

2.) No simulation module N t c Cj can simulate the firing of a 
module without receiving more data packets. 

3.) No simulation module in Cj will ever receive further data 
packets. 



The following sequence of assertions proves lemma 2.1 1 

1.) If every simulation module H ( c Cj is terminatebie, meaning that it 
receives a time packet («o) on every input port which is not in froni_dass t , and 
It eventually stops simulating the firing of the module, then during a test (or 
reset) of the class Cj 

a.) Each simulation module M { In Cj will receive at least one test 
(or reset) packet. 

b.) Exactly* test (or reset) packet* will he created, where 

K - 1 ♦ £ (|to_ckss ( | - l). 

c.) At least one test (or reset) packet will be received on each 
input port in fromjctastj for every M ( c Cj. 

Assertion la) can be shown by induction on the length of the shortest 
path from T to Jl t (there must be a path from T to any other module in a 
connectivity class.) As a basis, if / - 1, then T -> l { . M 4 will receive a test 
(or reset) pocket shortly after T sends out test (or reset) packets from each 
output port 0£ c to_*tass r . Now assume the assertion is true for all simulation 
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saoftvtos in tha class with a path from T of teaith Uh than or ofual to /. 



•'t; 



If than la a path of teaith M from T to a simulation modul* M 1( than 



..•vat .ha. 

taaftfc ffiw f to 1^ 

that it will raoava at 

win. aaao taat (or raaat) 

■f will avntoailjr racatvs a tost (or rant) paekat. 



tl^ 11^ ^ ^/ aa« thara i» a path of 

^aWg^s'ihgjj^B^ji^ajanmaaY"' ^^^^g^^m^aj^j^^^^^^^^^U^KA'^'^4^ ; am 1 ■-" '-^u^^^^M^^^ 

tost paekat. A* loaf as M. la tarasfmatabte. It 
on away output port *. c tojelatt-. Tharafora, 



It* foBowa alraetly from ia). Ittttailr, T erasta* aftd aands out 

ftaurfaw r | ."-tost (or sasstfr jsflhili. < fha firi»*toto ■fiat Ithoi' cfitilattoa modiila 

'•«l t C y raesrvus a tut tor rasrtf saihat, It watt aaad^it ftajetats^ taat ier 

raaat) paekat*, thareh*- craattac |toje)sss f | - 1 aaw aaefc K^Bai r ao ri v iat aay 

further taat (or raaat) paekat, a ateaJattaa metuto wtil aaad oaa taat (or raaat) 

» aaw taat peeks* win be create*, aor will an? ha destroyed. 

1«), avaataaUjr sM ■twaiattoa aomiites wffl racalwi at toast oaa 

:) peeheV th a r e fo io exactly k last (or raaat) packets wffl ha 

"■: ■..'.,;;■.•■ '.I'fi^ Y .'. v; fc.-vv.;.:. i- •■*'!£■?='■: "; HIi ::Y:;Jk,YY jffSlltsi^ -';>,■ ■' 



(or 



■t«ty 



Astartion lc) also follows from la), tway input part l A lh freauetossf of 
a simulation module 1 ( e C ; Is 

«! c t p m» r H li%jotma,^ : i^ 



to am output part a. of 



sasjj i &$m • mam. m ^-'yy^ yy 
la), l| wlU racaiva at toast oaa 

fast (or raaat) paekat 9 H| Is tamiaatahto. It wM awmlsjally saad a taat (or 



ituallr recaraa a taat (or rwat) Padwt aja^^. ThU > tro. f pr «gr toput 
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fort t k la fromjel«w ( of amy ihrolfttoa modal* l ( < Cj. 



al^asaamamwas "•••> a#w aaa>mmiaamm VHHp V wamwp MM *>*BMajW*>*Jw*y ^rJM"™ laaasa UMHWW 



If Mj la aot taniutitk than it will sot md out aay tast packets 
If It raearvos aay. 'thus It win net ami |t«_ri«« 1 | - 1 tast packets, which 
means that fewer thaa K taat packets will aa eiaatai dariag a tatt of tha dees. 
Tha tast cannot aasoaat wpJaat T sacaivat K tast paa)^ heaca tha last cannot 
succeed tf soma stmoJatiaa models ft, does aot moatvs time packets (») en all 
input ports which an net ta fremjaVest, or H doss mat atop staralattn* tha 
flrtag of tha modnla. 



3.) for a taat to anoc aa d. ao simulation madam earn, leesrve 

between tha time It reeetvss its first taat packet and Oat thme It asads lta laat 

taat packat. 



If a simulation module did receive a data packat taring, this time. It would 
aand out at laaat oaa packat (taat.-). Oaca a (taat.-) packat has been seat, 
tha tast must fall, beeeees amy tetajiaetable eJajukftlea model* which receive* a 



(tast.-) must aaad out a (tast.-) packat If all modules «ra taragaatable, T 
wlU receive at laaat oaa (tast.-) packat, «ad tha tast' will fall. If aomo 
slmulatioa module la aot tarmlaatabie, tha tast wlU fail la say casa. 



4.) If a tast sncoaads, ao slmamtiaa modxilt l { c I, wM receive amy data 
pachota afiar It has received lis Hat tast packat " 
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This will be shown by contradiction. Suppose f test of • class succeeds, 
but one or more stwmlatton modulM receive data packets after receiving ,..^hoir 
final tart packets. Let ftL be on* of tha first simulation modules f or which this 
happens. That is, during tha test, IL received «U of its test packets and later 
receives a data paefcat p on now input port (*, but this had aot happened to 
any simulation module In tha clan bafora thia point. If < A la not in 
fronuelast tt than M t could not have aant any taat paekata bafora receiving thia 
data packet, because it cannot aand any taat paekata bafora receiving a time 
packat (oo) on t k . Tans if a data packet Is received on an input port l k which 
ta not In froaurfaeif after any taat pocket has been received by U t , althar tha 
simulation module would not be tanainatabla, or l t would aand out a packet 
(taat.-). to either cast, the taat would fail. Thus, f A must be in (romjc\m i , 
which, by asserti o n 1c), implies that a test packet whs received on input port l k 
bafora data packet p ww received. By the flrst-in, first-out property of the 
communication Unhe between simulation modules, some module 1 { must have 
t data packet p to l ( after it had sent a taat packet to n^. This poaaihUity 
ha alimi&atad by looking urtwu 



Caaa 1. M ( - T 

The termination control module T did not send , out .any test packsfta unless it 
could not simulate any more firings without recai via* mora data packets. Thus, 
in order for T to sand data packet p after ssadleg taat paekata, it must recctwj 
at mast one data packH p' aftn tlia test h« liaan initiated. Suppose data 

■'ssss^ ■ ^MbbsbbbI ^M^tagtfM^gfe'.'-iigefliiBBBm' £§*^l-' : 4bjjj^ -^luan An£te""'d)amtt# .^gj^y?^^ 
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,ja ,^ih*» ^c^'^'aw t 



an of it* 



wdwt jpf , 






r. Tfei* 

tft which « 



WW padut p 
w* w». fiiilil of p t? ■{ ww tha ftat 



flwt 



* "t'T 

Ib wdw for *£ to «w4 4 to* wwM (Wrnw i M ty 4j% wwwfc p. to Mj. it wait 

tw> mm rfteariw. «4 W* WW »«**..»*» l^. THWV « t 
i wcwA r <ftet|, w w |wt **£«** wc»»t. Ettter 
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6.) If a tatt a a ocaa ia . thaa no sia«lattoa modulo la tha clan caa avor alaralata 
a firm* without racaMai aondai packet*, nor will It avar racatva mora data 



tf a tart tncoaadi, th*a at tha tin* a ftaadtthm nwdttla wot its first tatt 
packet, it amid aot st*nd«w any aon ftrtnfs wttho« m^trin* mat* data 
packets. Br Msertlon 3), the simulation modal* did aot receiv* aay data 
packets between this time aad the time at which it received |tf Jest tart packet, 
Br aamlloa 4), the simulation pcdale did naV^alP wltt ttreeet** aay data 
eaahell after ■ the last Wat jade* «a remteefc • -iThetaioieiatBorieet will anoaaad 
aalr If aH f ta w oa tt aa mednlef U the dap ara reedy tote* terminated. 

Thla eompletef tha proof that tha addition of tatmlaattoa operation* .to the 
atmulatton modules eamaot oeuse them to terminate too soon. Banco, mm of 
tha aUc requirements for tho Correctness of Stimul at ion Thaoram of Appendix 1 

ba violated, tha correctneei of the ria aw toa will be mdwt a tno d. 



Proof of tha Beoond Part 

Proving tho H io ad fort of tlw i lnoa w a wootow ahowtug that tha 
termination operations for each conn*ctlrt*y 4am win oauar the etmulatioa 
BKrfules in the elan to terminate, caw* tho termta stela conditions for tha dees 
aro satisfied. If a daw Cj consists of a sia*1e module *j which has ao 
self-loop, than tha correct coordtoaUon rce^tircment will guarantee that time 
(») will ba ant oat one* tlaw packets with Value « have baoa 
am all input porta, aad ao more firings of the madule c« m 
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Thus, this class will terminate once the termination conditions are satisfied. 
FOr connectivity classes containing cycles, it must be shown that once the 
connectivity class reaches the conditions for termination, any previous test or 
reset will be completed, a new test of the class will be initiated* and this teat 
will succeed. These requirements are stated in the following lemmai 



Lemma 2.2. Eventual Termination 



A.) Completion of a Test or Reset 

Suppose the termination control module T for a class Cy sends a test (or 
reset) packet from each output port o k in to_cla$t r . If every simulation module 
M ( in Cj is terminatable, meaning it eventually receives time packets (oo) on 
every input port l^ which is not in from_class i , and it eventually stops 
rimul^fg the firing of the module, then all simulation modules in the class 
will receive at least one test (or reset) packet, and T will eventually receive K 
test (or reset) packets, where 

K - 1 + 2^ t0jB,aw tl " ^* 

B.) Eventual Success of Test 

Suppose every simulation module M t in Cj reaches a state in which time 
packets (oo) have been received on all input ports which are not in from_cla*s t , 
no firings can be simulated without receiving more data packets, and no more 
data packets will ever be received by H t . Then T will send out test packets 
(test.+) from all output ports in tojclass r> and it will eventually receive K 
(test.+) packets in return without receiving any further data packets. 

C.) Termination after Successful Test 

If T sends out time packets (oo) on all of its output ports, then every 
simulation module M t in the class will eventually receive time packets (oo) on 
all input ports and hence will terminate. 



The following sequence of assertions proves each part of Lemma &£s 
A.) Completion of a Test or Beset 



• -l- ...,- ., 
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a.) Ifeh sUaulatkm modul* l ( will raccta «t iaart om tart (or 
watt) packet. , 

, v bj,.E»ctirK^|^^^ . 

2.1, . 



•art (or raaat) packets. 

Thif follbwi freaV th* way la which tha sftjaal oatpat forte 
aWalaialatft* ■rt^ J tw^fbrTi«Vi^ii^S^ , Wt. Th«.io 
tajaaf output port 'Ti*af parts ara c*oaa» iTiajch^ war tf£ft ft? w look oalr 



at tha Umlittoft awsnlas la tha clan aat tha eliaaaali oaaaactai to thai* 



i^w ' 7*^W"^^ TS**F*J(ft tt* *^ ****** •■* 
atmulattoa atodulat cad tha chaaaals eauactaft fa tha itjaal oatpat ports fulfill 
tfta nariMirr r*qiilr««iu for a iteaetti traa fl], with aaah are poiatia* froai 
a aoa to tta father. That if 



2. Evwy ofhar mod. ^ * T) has . da*!, arc laevlac from it 

J ^ HWWw al IMP i^Pp|lwws0P|W*lHa^^^ : ... ; . :■■ 

3. Thara ia a path froat evarjr aota to tta root soda. 

Oaa laiportaBt property of treat If that thejr an acyclic, haaoa thara la so path. 



■t -». ■«. which follows safer apal output laaha, Dartag tha wot (or raaat) 
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operation*, IT tart tar raert) peek** wUl 1* «NMii ttl om ell rtmnlation 
modules ka«e racrtvei rt lee*k t o|*>.|a^^^ tart (or reset) 

pockets wUMt only from stou! output port*. Tb«M packets wlU not bo 
destroyed, nor ca or tomlaattMi atotflatlon modal* noM onto them 
lndaftaitaly, hence the packets caa coiy to i ropoirt o d toward Ike root note T. 
Therefore T win eeantvally receive all K tort (or mart) packets, and the tort tor 
mat) operations will to co mptaf* . . .. . . . , , / . 



*•) Evantoal Sorrow at Tort. 

Suppose ovary rtmoiattoa modul* L In a claM C* re a ches a rtfto, tn which 
tint packets (oo) have bean received an «U Japjot jpajln. which, ate, no|,lp 
irooudaMt, no firings can to rtankted without racerrtn* mere deM, packeta, 
ana no mote data packets win ever to received by *L. 



1.) A naw tart of tto clam wffi to Initiated. ' 

tarminatable. Banco, by part A) of tba lemma, any m^picus.tast ,©r v , roast . 
operation* will to complctad. Furthermore, during the mat op er ation s every 
stufolfttton nwdxrta wffl leceive a reJat packet '''M6a, any new tart wlU take 
place .at • if no previous tarts had occutrajt. _ Fortherasofe, ..©nop tko 



ooeratlona are' i iiaaiilatait, a near tart wig to laittafel 
&) The tart will 



Aa Jang i no rtaralaH aa modul* racaraas a data packet totwe a n tko Unja it 
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receives its first tost packet and the time it receives its last test packet, it will 
send out (teat.+) packets as long as it receives (test.+) packets. By our 
assumption, no simulation modules will receive data packets once the test has 
started. Therefore, since T starts the test by sending ( test. +) packets, hy part 
A) of the lemma, K (teet.+) will be created, and T will eventually receive K 
(test.-f) packets. Thus, the test will succeed once the termination conditions 
for the class are satisfied. 

C.) Tnf^ l , f Jit V w 1 after £ Successful Test. 

Suppose the test of a class succeeds and T sends time packets (oo) from all 
output ports. 

1.) Every simulation module N ( in Cj will receive at least one time packet (oo) 
on some input port t k in fronuelass ( . 

This can be shown by induction on the length of the shortest path from T 
to M { . In fact, the proof is virtually identical to the proof of assertion la) in 
the proof of Lemma 2.1. 

2.) Every simulation module M ( c Cj will receive time packets (oo) on wvty 
input port. 

In order for the test to succeed, M ( must have received time packets (oo) 
on every input port which is not in fromjd*ss ( . Furthermore, by assertion 1) 
any module M t c Cj connected to M t must receive at least one time packet (oo) 
on some input port i r c fromjelastf. Hence, it will send out time packets (oo) 






ail output porta, 



«» to tap* part 4* af 



&■ C# Hfll 



ttoM fadwto (•!«■. an tapart 
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